Skip to content
fr Sign in
8.6 High

CVE-2019-12634 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,…

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a missing authentication check in an API call. An attacker who can send a request to an affected system could cause all currently authenticated users to be logged off. Repeated exploitation could cause the inability to maintain a session in the web-based management portal.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System Director 6.7 earliest → < 6.7.3.0 6.7.3.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System Director

The 9 CVEs of Cisco Unified Computing System Director →
CVE-2019-1938 A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big… 9.8 Critical CVE-2019-1974 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,… 9.8 Critical CVE-2019-1935 A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director… 9.8 Critical CVE-2019-1936 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor,… 7.2 High
Track this CVE