A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and gain access as an administrative user. The vulnerability is due to insufficient request header validation during the authentication process. An attacker could exploit this vulnerability by sending a series of malicious requests to an affected device. An exploit could allow the attacker to gain full administrative access to the affected device.
History

Tue, 19 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-08-21T18:30:19.438155Z

Updated: 2024-11-19T18:59:04.565Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1974

cve-icon Vulnrichment

Updated: 2024-08-04T18:35:52.473Z

cve-icon NVD

Status : Modified

Published: 2019-08-21T19:15:15.607

Modified: 2024-11-21T04:37:48.333

Link: CVE-2019-1974

cve-icon Redhat

No data.