CVE-2015-6388 - Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct se

CVE-2015-6388

Summary

Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575. <a href="https://cwe.mitre.org/data/definitions/918.html">CWE-918: Server-Side Request Forgery (SSRF)</a>

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-ucs1
http://www.securityfocus.com/bid/78870
http://www.securitytracker.com/id/1034380

Vulnerable Configurations

cpe:2.3:a:cisco:unified_computing_system_central_software:1.3\(0.1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_central_software:1.3\(0.1\):*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 07-12-2016 - 18:19)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	78870
cisco	20151201 Cisco UCS Central Software Server-Side Request Forgery Vulnerability
sectrack	1034380

Last major update

07-12-2016 - 18:19

Published

05-12-2015 - 03:59

Last modified

07-12-2016 - 18:19