Cisco Integrated Management Controller Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow an attacker to view sensitive system data.

N/A

关键功能的认证机制缺失

Cisco Integrated Management Controller 访问控制错误漏洞

Cisco Integrated Management Controller（IMC）是美国思科（Cisco）公司的一套用于对UCS（统一计算系统）进行管理的软件。该软件支持HTTP、SSH访问等，并可对服务器进行开机、关机和重启等操作。 Cisco IMC中基于Web的管理界面存在访问控制错误漏洞，该漏洞源于程序缺少正确的数据保护机制。远程攻击者可通过发送特制的HTTP请求利用该漏洞查看敏感系统的数据。

N/A

N/A