Skip to content
fr Sign in
Not rated

CVE-2018-15407 A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker…

Description

A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.

Affected products and versions

Product Affected versions Fixed in
Cisco HyperFlex HX-Series Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco HyperFlex HX-Series

The 13 CVEs of Cisco HyperFlex HX-Series →
CVE-2019-12620 A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated,… 5.3 Medium CVE-2019-1975 A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker… 6.5 Medium CVE-2019-12621 A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a… 6.8 Medium CVE-2019-1958 A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote… 5.4 Medium
Track this CVE