6.5 Moyenne

CVE-2019-1946 A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could…

Description

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface. The vulnerability is due to an incorrect implementation of authentication in the web-based management interface. An attacker could exploit this vulnerability by sending a crafted authentication request to the web-based management interface on an affected system. A successful exploit could allow the attacker to view limited configuration details and potentially upload a virtual machine image.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Enterprise NFV Infrastructure Software 3.10	premières → < 3.10.1	3.10.1

Références

20190807 Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability tools.cisco.com

Chronologie

Publiée 8 août 2019
Dernière modification 19 novembre 2024

Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →

CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 Élevée CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Moyenne CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Moyenne CVE-2026-20090 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 4.8 Moyenne

Suivre cette CVE