| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| integrated management controller supervisor | ≥ 2.2.0.3, ≤ 2.2.0.6 | |
| ucs director | = 6.7(0.0.67265)≥ 6.6.0.0, ≤ 6.6.1.0≥ 6.7.0.0, ≤ 6.7.1.0 | |
| ucs director express for big data | = 3.6.0.0≥ 3.7.0.0, ≤ 3.7.1.0 |
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator privileges, bypassing user authentication. The vulnerability is due to insufficient request header validation during the authentication process. An attacker could exploit this vulnerability by sending a series of malicious requests to an affected device. An exploit could allow the attacker to use the acquired session token to gain full administrator access to the affected device.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン