Cisco Nexus OS Device Command Line Interface Local Elevation of Privilege Vulnerability

Nexus is Cisco's line of network switches designed for data centers. A security vulnerability in the CLI parser of the Cisco Nexus Operating System NX-OS allows an authenticated, local attacker to gain elevated privileges by exploiting this vulnerability...

VCE Vision Intelligent Operations Information Disclosure Vulnerability (CNVD-2015-03961)

VCE Vision Intelligent Operations is a suite of data center software from VCE that supports data centers across multiple systems. The software provides converged infrastructure management, system health checks, and more. An information disclosure vulnerability exists in VCE Vision Intelligent...

Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability

Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. A cross-site request forgery vulnerability exists in Cisco DCAF version 1.4. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

CVE-2015-4189

Cisco Data Center Analytics Framework (DCAF) 1.4 contains a Cross-Site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack the authentication of arbitrary users (Bug ID CSCun26807). Affected product: DCAF 1.4. Root cause: CSRF protection insufficiency enabling unautho...

Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability

A vulnerability in the Data Center Analytics Framework DCAF application could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the us...

Catastrophic vulnerability: Venom threat most of the data center-vulnerability warning-the black bar safety net

A security research firm alert, referring to a new Bug could allow a hacker from the inside of the ride unscathed in the data center solve most of the machine. The zero-day vulnerability from the extensive application virtualization software of the traditional General-purpose component that can b...

Cisco Prime Data Center Network Manager ntpd Multiple Vulnerabilities (uncredentialed check)

According to its self-reported version number, the Cisco Prime Data Center Network Manager DCNM running on the remote host is affected by multiple vulnerabilities : - A security weakness exists due to the configauth function improperly generating default keys when no authentication key is defined...

VMS users please note:Venom vulnerability than Heartbleed also risk-vulnerability warning-the black bar safety net

Data centers are mostly using the host system management program host hypervisior to isolate a single server to run multiple virtual machine instances, but this is the underlying structure, it is found that the presence of the 1 0 years of“virtual environments neglected of business operation”in t...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

Cisco Prime Data Center Network Manager Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Cisco Data Center Network Manager Directory Traversal Vulnerability

Cisco Data Center Network Manager is prone to a directory-traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Prime Data Center Network Manager < 7.1(1) Directory Traversal Vulnerability

The version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a directory traversal vulnerability in the fmserver servlet due to improper validation of user-supplied input. An unauthenticated, remote attacker, using a crafted file pathname, can read...

Cisco Prime Data Center Network Manager directory traversal

fmserver servlet directory traversal...

Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability (CNVD-2015-02229)

Cisco Prime Data Center Network Manager is is a network management application that helps you effectively implement and manage virtualized data centers. An information disclosure vulnerability exists in Cisco Prime Data Center Network Manager files due to the fmserver servlet in Cisco DCNM failin...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability

Cisco Prime Data Center Network Manager is a network management application that helps you efficiently implement and manage your virtualized data center. A security vulnerability exists in the fmserver servlet of Cisco DCNM that fails to perform valid input validation for path information. An...

Cisco Data Center Network Manager FileServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to read arbitrary files, and bypass authentication, on a system with vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fmserver servlet which i...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...