Multiple EMC products Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
EMC Celerra Network Server 6.x
Emc vnx Operating Environment for File 7.x
EMC VNXe 2.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54414
Cve id: CVE-2012-2282

EMC is a provider of storage hardware solutions.

EMC Celerra Network Server 6.0.36.4 to 6.0.60.2, emc vnx 7.0.12.0 to 7.0.53.1,
EMC VNXe 2.0, MR1, and MR2 have multiple security vulnerabilities in access control settings. Attackers can exploit these vulnerabilities to illegally access the exported file system and bypass security restrictions, access sensitive information.

<* Source: vendor

Link: http://secunia.com/advisories/49911/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.emc.com/products/storage_management/navisphere.jsp