Lucene search

[email protected]CVE-2015-6259

HistorySep 04, 2015 - 1:59 a.m.

CVE-2015-6259

2015-09-0401:59:02

CWE-20

[email protected]

web.nvd.nist.gov

cve-2015-6259

javaserver pages

jsp

cisco

integrated management controller

imc supervisor

ucs director

cloupia unified infrastructure controller

http requests

file write vulnerability

nvd

cscus36435

cscus62625

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.6%

JSON

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

Affected configurations

NVD

Node

ciscointegrated_management_controller_supervisorRange≤1.0.0.0

Node

ciscounified_computing_system_directorRange≤5.2.0.0

ciscounified_computing_system_directorMatch3.4_base

ciscounified_computing_system_directorMatch4.0_base

ciscounified_computing_system_directorMatch4.1_base

ciscounified_computing_system_directorMatch5.0.0.0

ciscounified_computing_system_directorMatch5.0.0.1

ciscounified_computing_system_directorMatch5.0.0.2

ciscounified_computing_system_directorMatch5.0.0.3

ciscounified_computing_system_directorMatch5.1.0.0

ciscounified_computing_system_directorMatch5.1.0.1

CPENameOperatorVersion
cisco:integrated_management_controller_supervisorcisco integrated management controller supervisorle1.0.0.0

CPE	Name	Operator	Version
cisco:integrated_management_controller_supervisor	cisco integrated management controller supervisor	le	1.0.0.0

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs

www.securitytracker.com/id/1033451

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2015-6259

nvd1 openvas1 prion1 cvelist1 cisco1 securityvulns1