CVE-2019-1974 Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

🗓️ 21 Aug 2019 18:30:19Reported by ciscoType

Cisco IMC, UCS Director Authentication Bypass Vulnerabilit

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability affects the web interface for controlling the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to gain access to target systems with administrator privileges.	30 Aug 201900:00	–	bdu_fstec
Cisco	Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director Authentication Bypass (cisco-sa-20190821-imcs-ucs-authbypass)	9 Jun 202000:00	–	nessus
CNVD	Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerabilities	26 Aug 201900:00	–	cnvd
CVE	CVE-2019-1974	21 Aug 201918:30	–	cve
NVD	CVE-2019-1974	21 Aug 201919:15	–	nvd
Prion	Design/Logic Flaw	21 Aug 201919:15	–	prion
ThreatPost	Cisco Patches Six Critical Bugs in UCS Gear and Switches	21 Aug 201917:38	–	threatpost
Vulnrichment	CVE-2019-1974 Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability	21 Aug 201918:30	–	vulnrichment

[
  {
    "product": "Cisco Unified Computing System Director",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.7.3.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-ucs-authbypass

21 Aug 2019 18:30Current

9.9High risk

Vulners AI Score9.9

CVSS 39.8

EPSS0.04491

CWE-287