A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.
History

Sat, 09 Nov 2024 00:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2021-02-04T16:40:25.473885Z

Updated: 2024-11-08T23:52:11.438Z

Reserved: 2020-11-13T00:00:00

Link: CVE-2021-1354

cve-icon Vulnrichment

Updated: 2024-08-03T16:11:16.896Z

cve-icon NVD

Status : Modified

Published: 2021-02-04T17:15:18.763

Modified: 2024-11-21T05:44:09.857

Link: CVE-2021-1354

cve-icon Redhat

No data.