Cross site scripting

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...

Input validation

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP...

CVE-2018-0440 Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP...

CVE-2018-0450 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...

CVE-2018-0450 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the management interface on an affected device. The vulnerability is due to insufficient...

CVE-2018-0440

CVE-2018-0440 concerns Cisco Data Center Network Manager (DCNM). The issue is in the web interface where incomplete input validation of HTTP requests allows an authenticated application administrator to execute commands on the underlying OS with root privileges. Impact is privilege escalation wit...

CVE-2018-0450

CVE-2018-0450 concerns Cisco Data Center Network Manager (DCNM). The vulnerability is in the web-based management interface, caused by insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by tricking a user int...

CVE-2018-0440 Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP...

The vulnerability of the Reference UI component in the Intel Data Center Manager SDK development tools allows a attacker to execute arbitrary code.

The vulnerability of the Reference UI component in the Intel Data Center Manager SDK development toolset is caused by privilege management errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with administrator privileges...

Intel Data Center Manager SDK Privilege Permission and Access Control Issues Vulnerability

Intel Data Center Manager SDK is a data center manager SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. The Intel Data Center Manager SDK is vulnerable to a privilege permission and access control issue. An attacker could use this...

Intel Data Center Migration Center Software software installer DLL injection vulnerability

Intel Data Center Migration Center Software is a set of data center migration software from Intel Corporation in the U.S. The software installer is its installer. A DLL injection vulnerability exists in the software installer in Intel Data Center Migration Center Software 3.1 and earlier versions...

CVE-2018-3679

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges...

CVE-2018-3679

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges...

Design/Logic Flaw

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...

Privilege escalation

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges...

CVE-2018-3679

Intel Data Center Manager SDK (before 5.1) is affected by CVE-2018-3679. The issue is a privilege-escalation in the Reference UI that could allow an unauthorized remote unauthenticated user to potentially execute code with administrator privileges. The Intel advisory states CVSS v3.0 base score 9...

CVE-2018-12160

CVE-2018-12160 is a DLL injection vulnerability in Intel Data Center Migration Center Software installer (v3.1 and earlier). The issue allows an authenticated local user to execute code with default directory permissions due to improper installer permissions. Affected product/versions: Intel Data...

CVE-2018-3679

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges...

Intel® Data Center Manager SDK Advisory

Summary: Potential security vulnerability in Intel® Data Center Manager SDK may allow privilege escalation. Intel is releasing Intel® Data Center Manager updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3679 Description: Escalation of privilege in Reference ...

Cisco Data Center Network Manager Elevation of Privilege Vulnerability

Cisco Data Center Network Manager DCNM is the management system for Cisco Unified Fabric. An elevation of privilege vulnerability exists in the web interface of Cisco Data Center Network Manager. The vulnerability stems from incomplete input validation of user input in HTTP requests. An attacker...