CVE-2019-1937 Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

🗓️ 21 Aug 2019 18:25:13Reported by ciscoType

Vulnerability in Cisco IMC Supervisor, UCS Director & UCS Director Express allows admin access bypas

Reporter	Title	Published	Views	Family All 23
0day.today	Cisco UCS Director, Cisco Integrated Management Controller Supervisor - Multiple Vulnerabilities	29 Aug 201900:00	–	zdt
0day.today	Cisco UCS Director Unauthenticated Remote Code Execution Exploit	2 Sep 201900:00	–	zdt
0day.today	Cisco UCS-IMC Supervisor 2.2.0.0 - Authentication Bypass Vulnerability	15 Jul 202300:00	–	zdt
BDU FSTEC	The vulnerability affects the web interface for managing the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows an attacker to obtain a valid session token with administrator privileges on the target system.	30 Aug 201900:00	–	bdu_fstec
Circl	CVE-2019-1937	2 Sep 201915:56	–	circl
Cisco	Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director Authentication Bypass (cisco-sa-20190821-imcs-ucs-authby)	26 Aug 201900:00	–	nessus
Check Point Advisories	Cisco UCS Director Web Interface Authentication Bypass (CVE-2019-1937)	16 Sep 201900:00	–	checkpoint_advisories
CVE	CVE-2019-1937	21 Aug 201918:25	–	cve
Exploit DB	Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities	21 Aug 201900:00	–	exploitdb

[
  {
    "vendor": "Cisco",
    "product": "Cisco Unified Computing System Director",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "6.7.3.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2019/Aug/36
packetstormsecurity	www.packetstormsecurity.com/files/173531/Cisco-UCS-IMC-Supervisor-2.2.0.0-Authentication-Bypass.html
seclists	www.seclists.org/bugtraq/2019/Aug/49
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-ucs-authby
packetstormsecurity	www.packetstormsecurity.com/files/154308/Cisco-UCS-Director-Unauthenticated-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.html

17 Jul 2023 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 39.8

EPSS0.90436

CWE-287