CVE-2007-3012 - Vulnerability Details - OpenCVE

The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Fujitsu	Primergy Bx300

Configuration 1 [-]

cpe:2.3:h:fujitsu:primergy_bx300:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/37837
http://secunia.com/advisories/25943
http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php
http://www.securityfocus.com/archive/1/472803/100/0/threaded
http://www.securityfocus.com/bid/24761
http://www.vupen.com/english/advisories/2007/2442
https://exchange.xforce.ibmcloud.com/vulnerabilities/35264

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-07-05T19:00:00

Updated: 2024-08-07T13:57:54.939Z

Reserved: 2007-06-04T00:00:00

Link: CVE-2007-3012

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-07-05T19:30:00.000

Modified: 2024-11-21T00:32:12.143

Link: CVE-2007-3012

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-07-04T00:00:00", "descriptions": [{"lang": "en", "value": "The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "24761", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24761"}, {"name": "ADV-2007-2442", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2442"}, {"name": "37837", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37837"}, {"tags": ["x_refsource_MISC"], "url": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php"}, {"name": "25943", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25943"}, {"name": "20070704 Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/472803/100/0/threaded"}, {"name": "primergy-web-interface-info-disclosure(35264)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35264"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3012", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "24761", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24761"}, {"name": "ADV-2007-2442", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2442"}, {"name": "37837", "refsource": "OSVDB", "url": "http://osvdb.org/37837"}, {"name": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php", "refsource": "MISC", "url": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php"}, {"name": "25943", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25943"}, {"name": "20070704 Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/472803/100/0/threaded"}, {"name": "primergy-web-interface-info-disclosure(35264)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35264"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:57:54.939Z"}, "title": "CVE Program Container", "references": [{"name": "24761", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24761"}, {"name": "ADV-2007-2442", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2442"}, {"name": "37837", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/37837"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php"}, {"name": "25943", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25943"}, {"name": "20070704 Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/472803/100/0/threaded"}, {"name": "primergy-web-interface-info-disclosure(35264)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35264"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3012", "datePublished": "2007-07-05T19:00:00", "dateReserved": "2007-06-04T00:00:00", "dateUpdated": "2024-08-07T13:57:54.939Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:fujitsu:primergy_bx300:*:*:*:*:*:*:*:*", "matchCriteriaId": "C55962BC-2031-4F96-97E5-83048A0AE8BC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive information by canceling the authentication dialog when accessing a sub-page, which still displays the form field contents of the sub-page, as demonstrated using (1) config/ip_management.htm and (2) config/snmp_config.htm."}, {"lang": "es", "value": "La interfaz web en Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade permite a atacantes remotos obtener informaci\u00f3n sensible cancelando el di\u00e1logo de autenticaci\u00f3n cuando se accede a una sub-p\u00e1gina, la cual a\u00fan muestra los contenidos de los campos de formulario de la sub-p\u00e1gina, como se ha demostrado utilizando (1) config/ip_management.htm y (2) config/snmp_config.htm."}], "id": "CVE-2007-3012", "lastModified": "2024-11-21T00:32:12.143", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-07-05T19:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/37837"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25943"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/472803/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/24761"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/2442"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35264"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/37837"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25943"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://www.redteam-pentesting.de/advisories/rt-sa-2007-003.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/472803/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24761"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/2442"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35264"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}