Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console. An attacker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patterns that control the web application's mechanisms for authentication control. An exploit could allow the attacker to access a specific VM on the CSP, which causes a complete loss of the system's confidentiality, integrity, and availability. This vulnerability affects Cisco Cloud Services Platform (CSP) 2100 running software release 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. Cisco Bug IDs: CSCve64690.
CVSS Information
N/A
Vulnerability Type
权限、特权和访问控制
Vulnerability Title
Cisco Cloud Services Platform 2100 web console 权限许可和访问控制漏洞
Vulnerability Description
Cisco Cloud Services Platform（CSP）2100是美国思科（Cisco）公司的一套用于数据中心网络功能虚拟化的软硬件平台。web console是其中的一个Web控制台程序。 Cisco CSP 2100中的web console的URL的身份验证机制的产生存在安全漏洞。远程攻击者可利用该漏洞访问CSP上的VM，影响系统的完整性、保密性和可用性。以下版本受到影响：Cisco Cloud Services Platform 2100 2.1.0版本，2.1.1版本，2.1.2版本
CVSS Information
N/A
Vulnerability Type
N/A