漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console. An attacker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patterns that control the web application's mechanisms for authentication control. An exploit could allow the attacker to access a specific VM on the CSP, which causes a complete loss of the system's confidentiality, integrity, and availability. This vulnerability affects Cisco Cloud Services Platform (CSP) 2100 running software release 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. Cisco Bug IDs: CSCve64690.
漏洞信息
N/A
漏洞
权限、特权和访问控制
漏洞
Cisco Cloud Services Platform 2100 web console 权限许可和访问控制漏洞
漏洞信息
Cisco Cloud Services Platform（CSP）2100是美国思科（Cisco）公司的一套用于数据中心网络功能虚拟化的软硬件平台。web console是其中的一个Web控制台程序。 Cisco CSP 2100中的web console的URL的身份验证机制的产生存在安全漏洞。远程攻击者可利用该漏洞访问CSP上的VM，影响系统的完整性、保密性和可用性。以下版本受到影响：Cisco Cloud Services Platform 2100 2.1.0版本，2.1.1版本，2.1.2版本
漏洞信息
N/A
漏洞
N/A