4.6
Moyenne
CVE-2019-1632 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
Description
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to use a web browser and the privileges of the user to perform arbitrary actions on the affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System (Management Software) | 4.0 | Pas de correctif indiqué |
Références
- 20190619 Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability tools.cisco.com
- 108858 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Computing System (Management Software)
Les 14 CVE de Cisco Unified Computing System (Management Software) →
CVE-2020-3242
A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with…
4.9
Moyenne
CVE-2020-3241
A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to…
6.5
Moyenne
CVE-2019-1907
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote…
8.8
Élevée
CVE-2019-1908
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management…
7.5
Élevée