Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2012-4610

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

EMC Avamar是业界最优秀的重复数据删除技术之一，是一种源端的全局重复数据删除技术。 EMC Avamar Client for VMware 6.1版本中存在漏洞，该漏洞源于代理客户端以明文方式存储服务器根密码。通过利用对代理客户端的‘网络访问’，远程攻击者可利用该漏洞获取敏感信息。

AI Predicted 6.5 Difficulty: Moderate EPSS 0.62% · P48
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-4610

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
EMC Avamar Client for VMware 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EMC Avamar是业界最优秀的重复数据删除技术之一，是一种源端的全局重复数据删除技术。 EMC Avamar Client for VMware 6.1版本中存在漏洞，该漏洞源于代理客户端以明文方式存储服务器根密码。通过利用对代理客户端的‘网络访问’，远程攻击者可利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2012-4610

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2012-4610

请登录查看更多情报信息。

Vendor Advisories for CVE-2012-4610 (3)

Same Patch Batch · n/a · 2012-10-31 · 25 CVEs total

CVE-2012-4492 Drupal Shorten URLs模块多个跨站脚本漏洞
CVE-2012-4940 Axigen Free Mail Server ‘View Log Files’组件多个目录遍历漏洞
CVE-2012-4939 SolarWinds Orion Network Performance Monitor IPAM网络接口跨站脚本漏洞
CVE-2012-5671 Exim DKIM DNS解码拒绝服务漏洞
CVE-2012-4544 Xen PV Domain Builder 内核解压缩本地拒绝服务漏洞
CVE-2012-4532 Joomla! Language Switcher模块跨站脚本漏洞
CVE-2012-4531 Joomla! 跨站脚本漏洞
CVE-2012-4500 Drupal Announcements模块安全漏洞
CVE-2012-4499 Drupal Email Field模块联系格式化页面安全漏洞
CVE-2012-4496 Drupal Custom Publishing Options模块跨站脚本漏洞
CVE-2012-4495 Drupal Mime Mail模块安全漏洞
CVE-2012-4494 Drupal Shibboleth认证模块安全漏洞
CVE-2012-4547 AWStats ‘awredir.pl’未明安全漏洞
CVE-2012-4491 Drupal Monthly Archive by Node Type模块安全漏洞
CVE-2012-4490 Drupal Excluded Users模块多个跨站脚本漏洞
CVE-2012-4489 Drupal Secure Login模块‘securelogin_secure_redirect’函数开放重定向漏洞
CVE-2012-4488 Drupal Location模块安全漏洞
CVE-2012-4485 Drupal Gallery格式化模块‘galleryformatter_field_formatter_view’函数多个跨站脚本漏洞
CVE-2012-4484 Drupal Campaign Monitor模块跨站脚本漏洞
CVE-2012-4483 Drupal Commons模块‘commons_discussion_views_default_views’函数安全漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2012-4610

No comments yet

Leave a comment