Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerabilities

🗓️ 26 Aug 2019 00:00:00Reported by China National Vulnerability DatabaseType

Authentication bypass in Cisco IMC Supervisor and UCS Director products allows remote attackers to gain full admin access via crafted requests.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability affects the web interface for controlling the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to gain access to target systems with administrator privileges.	30 Aug 201900:00	–	bdu_fstec
Cisco	Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director Authentication Bypass (cisco-sa-20190821-imcs-ucs-authbypass)	9 Jun 202000:00	–	nessus
CVE	CVE-2019-1974	21 Aug 201918:30	–	cve
Cvelist	CVE-2019-1974 Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201918:30	–	cvelist
NVD	CVE-2019-1974	21 Aug 201919:15	–	nvd
Prion	Design/Logic Flaw	21 Aug 201919:15	–	prion
ThreatPost	Cisco Patches Six Critical Bugs in UCS Gear and Switches	21 Aug 201917:38	–	threatpost
Vulnrichment	CVE-2019-1974 Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201918:30	–	vulnrichment