Skip to content
fr Sign in
9.8 Critical

CVE-2019-1938 A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big…

Description

A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The vulnerability is due to improper authentication request handling. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an unprivileged attacker to access and execute arbitrary actions through certain APIs.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System Director 6.7 earliest → < 6.7.3.0 6.7.3.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System Director

The 9 CVEs of Cisco Unified Computing System Director →
CVE-2019-1974 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,… 9.8 Critical CVE-2019-1935 A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director… 9.8 Critical CVE-2019-1936 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,… 7.2 High CVE-2019-1937 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,… 9.8 Critical
Track this CVE