« Volver al listado

CVE-2012-6324

Estado: ModificadaMedia (4)—

Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vmware — Vcenter Server Appliance

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6324",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-21T21:55:01.800",
  "references": [
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2012-0018.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en in VMware vCenter Server Appliance (vCSA) v5.0 anteriores a Update 2 y v5.1 anteriores a Patch 1 permite que usuarios remotos autenticados accedan a ficheros de su elección mediante vectores de ataque no especificados"
    }
  ],
  "lastModified": "2026-06-16T23:48:00.073",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server_appliance:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35D34345-0AD1-499C-9A74-982B2D3F305A"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server_appliance:5.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10D6E87F-2768-48DF-AD88-3FFC9DAB9562"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server_appliance:5.0:update1a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E5DD18A-CE47-44A8-B034-A7CA14F5D4F8"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vcenter_server_appliance:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FECF06B5-3915-48F0-A140-41C7A27EE99D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}