A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote malicious user to bypass user authentication and gain access as an administrative user. The vulnerability is due to insufficient request header validation during the authentication process. An attacker could exploit this vulnerability by sending a series of malicious requests to an affected device. An exploit could allow the malicious user to gain full administrative access to the affected device.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco integrated management controller supervisor 2.1.0.0 |
||
cisco integrated management controller supervisor |
||
cisco ucs director |
||
cisco ucs director 6.7\\(1.1\\) |
||
cisco ucs director 6.7\\(2.0\\) |
||
cisco ucs director express for big data |
||
cisco ucs director express for big data 3.6.1.0 |
||
cisco ucs director express for big data 3.6.0.0 |
Plus UCS and other gear need updates Breaker, breaker. Apple's iOS 12.4 update breaks jailbreak break, un-breaks the break. 10-4
Cisco has emitted a fresh round of software updates to address security holes in its network switches and controllers. Switchzilla's latest patch bundle includes six alerts for what it rates as critical issues, including flaws in its Small Business 220 Series switches and UCS Director software. Combined with Cisco's fixes for 'high' and 'moderate' issues, the networking giant posted a total of 33 security alerts on Wednesday. For the Small Business 220 Switches, a pair of patches address CVE-201...
Vulmon