Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Unified Computing System Managerimage-download进程绝对路径遍历漏洞
Vulnerability Description
Cisco Unified Computing System（UCS）是美国思科（Cisco）公司的一套统一计算系统。该系统通过大量采用虚拟化技术将网络、计算和虚拟化资源集成到一个平台上。 Cisco UCS中的fabric-interconnect组件中的image-download进程中存在绝对路径遍历漏洞。本地攻击者可通过修改图像头中的完整路径名利用该漏洞在文件系统上覆盖或删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A