Information disclosure in Cisco Unified Computing System

CVE-2015-6355

The web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote attackers to obtain potentially sensitive version information by visiting an unspecified URL, aka Bug ID CSCuw87226.

Vulnerability class: Information Disclosure

EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_computing_system — versions 2.2\(5b\)a
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)