7 matches found
CVE-2020-3389
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An...
CVE-2020-3389
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An...
CVE-2020-3389: Missing Encryption of Sensitive Data
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An...
PT-2020-5078
Name of the Vulnerable Software and Affected Versions Cisco Hyperflex HX-Series Software affected versions not specified Description A vulnerability exists in the installation component of the software, allowing an authenticated, local attacker to retrieve the password configured at installation...
CVE-2019-1857
A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for...
CVE-2019-1857: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for...
PT-2019-2062
Name of the Vulnerable Software and Affected Versions Cisco HyperFlex HX-Series affected versions not specified Description The issue is related to insufficient authentication checks for executed requests in the web-based management interface of Cisco HyperFlex, allowing a remote attacker to...