PT-2019-2149

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager affected versions not specified Description A vulnerability in the web-based management interface of the affected software could allow an...

PT-2019-2413 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network EPN Manager versions affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-bas...

PT-2019-2153

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitra...

PT-2019-2154

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitra...

The vulnerability of the Cisco Prime File Upload service in the Data Center Network Manager (DCNM) and the Prime Infrastructure (PI) network lifecycle management software allows a malicious attacker to upload arbitrary files to any directory on the vulnerable device and execute them.

The vulnerability of the Cisco Prime File Upload service in the Data Center Network Manager DCNM and the Prime Infrastructure PI network lifecycle management software is due to errors in specifying the path to the directory, as well as the absence of restrictions during the upload of files of a...

Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15768)

An authentication bypass vulnerability exists in Dell OpenManage Network Manager. The vulnerability is due to a misconfiguration in the /etc/sudoers file. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into t...

Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15767)

An authentication bypass vulnerability exists in Dell OpenManage Network Manager. The vulnerability is due to a misconfiguration in the /etc/sudoers file. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into t...

CVE-2018-15768

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

Default configuration

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

Authorization

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

CVE-2018-15767

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

CVE-2018-15767

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

CVE-2018-15768

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

CVE-2018-15767 Improper Authorization Vulnerability

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

CVE-2018-15768 Insecure MySQL Configuration Vulnerability

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database...

CVE-2018-15768

CVE-2018-15768 affects Dell OpenManage Network Manager prior to 6.5.0. The embedded MySQL configuration is insecure, enabling read/write filesystem access for MySQL users and potentially enabling privilege escalation. Affected product: OpenManage Network Manager; root cause: default/misconfigured...

CVE-2018-15767

CVE-2018-15767 affects Dell OpenManage Network Manager before 6.5.3, caused by a misconfiguration in /etc/sudoers that results in improper authorization. The vulnerability can allow attackers to gain unauthorized access and escalate privileges on affected appliances. Dell released version 6.5.3 w...

PT-2018-13193

Name of the Vulnerable Software and Affected Versions Dell OpenManage Network Manager versions prior to 6.5.3 Description The issue is caused by a misconfiguration in the /etc/sudoers file, leading to an improper authorization. Recommendations For versions prior to 6.5.3, update to version 6.5.3 ...

PT-2018-13194

Name of the Vulnerable Software and Affected Versions Dell OpenManage Network Manager versions prior to 6.5.0 Description The issue is related to an insecure default configuration setting for the embedded MySQL database, which allows MySQL users to have read/write access to the file system...

CVE-2018-15767: Incorrect Authorization

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...