CVE-2012-5417

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924.

Weaknesses (CWE)

CWE-264

Affected Products (18)

cisco · prime_data_center_network_managervulnerable

cisco · prime_data_center_network_manager

References (6)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm

Vendor Advisory

http://www.securityfocus.com/bid/56348

http://www.securitytracker.com/id?1027712

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm

Vendor Advisory

http://www.securityfocus.com/bid/56348

http://www.securitytracker.com/id?1027712