Vulnerability in Cisco Unified Computing System 6120xp Fabric Interconnect
CVE-2013-1182
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
EPSS: 0.035 (88.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.3\(1o\), 1.3(1p), 1.3\(1w\)
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)