Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

🗓️ 15 Apr 2020 16:00:00Reported by CiscoType

Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data. REST API vulnerabilities may allow authentication bypass or directory traversal attack

Reporter	Title	Published	Views	Family All 98
0daydb	Cisco UCS Director Cloupia Script - Remote Code Execution	7 Jun 202012:52	–	0daydb
zdt	Cisco UCS Director Cloupia Script Remote Code Execution Exploit	8 Jun 202000:00	–	zdt
BDU FSTEC	The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC) Supervisor, as well as in tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, allows attackers to compromise the integrity of protected information.	19 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows attackers to enhance their privileges.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows attackers to enhance their privileges.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows attackers to enhance their privileges.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E

17 Apr 2020 19:27Current

8.4High risk

Vulners AI Score8.4

EPSS0.88374