Design/Logic Flaw

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...

CVE-2012-4090

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089...

CVE-2012-4084

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

CVE-2012-4084

Cisco UCS Fabric Interconnect web management interface CSRF vulnerability (CVE-2012-4084) allows unauthenticated remote attackers to hijack user authentication via cookie-based session handling. Exploitation would enable the attacker to perform actions as the affected user; Cisco notes that softw...

PT-2013-1624

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description A cross-site request forgery CSRF issue in the web-management interface of the fabric interconnect component allows remote attackers to hijack the authentication of...

CVE-2012-4084: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

PT-2013-1630

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions affected versions not specified Description A vulnerability exists in the management interface of Cisco NX-OS, allowing remote authenticated users to obtain sensitive configuration-file information. This issue is due to...

Design/Logic Flaw

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

CVE-2013-5944

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

CVE-2013-5519

Cross-site scripting XSS vulnerability in the management interface on Cisco Wireless LAN Controller WLC devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810...

CVE-2013-5519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface on Cisco Wireless LAN Controller WLC devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810...

CVE-2013-5944: Improper Authentication

The integrated web server on Siemens SCALANCE X-200 switches with firmware before 4.5.0 and X-200IRT switches with firmware before 5.1.0 does not properly enforce authentication requirements, which allows remote attackers to perform administrative actions via requests to the management interface...

PT-2013-5601

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices affected versions not specified Description A cross-site scripting XSS issue in the management interface of Cisco Wireless LAN Controller devices allows remote attackers to inject arbitrary web script ...

Cisco Unified Computing System Fabric System Manager Man-in-the-Middle Vulnerability

A vulnerability in the management interface of the Cisco Unified Computing System could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to improper identity validation of vCenter management consoles. An attacker could exploit this...

Cisco Unified Computing System Fabric Interconnect Remote Access Vulnerability

A vulnerability in the high availability service of Cisco Unified Computing System Fabric Interconnect could allow an unauthenticated, remote attacker to gain access to sensitive information and prevent the cluster service from syncing with its peers. The vulnerability is due to improper binding ...

CVE-2012-4092

The management interface in the Central Software component in Cisco Unified Computing System UCS does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683...

CVE-2012-4092

CVE-2012-4092 affects Cisco UCS Central Software’s management interface, where improper validation of vCenter console identities enables MITM-style interception—read/modify inter-device data streams. Root cause: identity spoofing between vCenter consoles and UCS Manager. Impact is partial confide...

PT-2013-1632

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software component affected versions not specified Description The issue is related to the management interface in the Central Software component, which fails to properly validate the identity of...

CVE-2013-5497

The authentication manager process in the web framework in Cisco Intrusion Prevention System IPS does not properly handle user tokens, which allows remote attackers to cause a denial of service intermittent MainApp hang via a crafted management-interface connection request, aka Bug ID CSCuf20148...

PT-2013-5581

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS affected versions not specified Description The issue is related to the authentication manager process in the web framework, which does not properly handle user tokens. This allows remote attackers to caus...