5.3
Medium
CVE-2020-26062 A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to…
Description
A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication attempt. An attacker could exploit this vulnerability by sending authentication requests to the affected application. A successful exploit could allow the attacker to confirm the names of administrative user accounts for use in further attacks.There are no workarounds that address this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Computing System (Managed) | Versions not published | |
| unified_computing_system | Versions not published |
References
- cisco-sa-cimc-enum-CyheP3B7 sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Computing System (Managed)
The 41 CVEs of Cisco Unified Computing System (Managed) →
CVE-2026-76458
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
8.6
High
CVE-2026-76459
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
9.8
Critical
CVE-2026-76471
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute…
9.8
Critical
CVE-2026-76455
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
9.8
Critical