HIGH✓ PATCH🇬🇧 English

CVE-2019-1958

CVSS 8.8v3.1pub. 2019-08-08upd. 2024-11-21

A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Cisco Hyperflex Hx Data Platform

    OS
    Cisco
    < 4.0\(2a\)
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2021-1497CRITICAL9.8⚠ KEVten sam produkt

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenti...

CVE-2021-1498CRITICAL9.8⚠ KEVten sam produkt

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenti...

CVE-2019-1664HIGH7.8ten sam produkt

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attack...

CVE-2018-15380HIGH8.8ten sam produkt

A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adj...

CVE-2018-15382HIGH8.6ten sam produkt

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid,...