9.8
Critical
CVE-2020-3240 Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a…
Description
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco UCS Director | Versions not published |
References
- 20200415 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data tools.cisco.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Cisco UCS Director
The 13 CVEs of Cisco UCS Director →
CVE-2022-20765
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a…
4.8
Medium
CVE-2020-3464
A vulnerability in the web-based management interface of Cisco UCS Director could allow an authenticated, remote…
4.8
Medium
CVE-2020-3329
A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS…
4.3
Medium
CVE-2020-3252
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a…
9.8
Critical