Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco HyperFlex Arbitrary Statistics Write Vulnerability
Vulnerability Description
A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by connecting to the Graphite service and sending arbitrary data. A successful exploit could allow the attacker to write arbitrary data to Graphite, which could result in invalid statistics being presented in the interface. Versions prior to 3.5(2a) are affected.
CVSS Information
N/A
Vulnerability Type
对数据真实性的验证不充分
Vulnerability Title
Cisco HyperFlex Software 数据伪造问题漏洞
Vulnerability Description
Cisco HyperFlex Software是美国思科（Cisco）公司的一套套可扩展的分布式文件系统。该系统通过云管理提供统一的计算、存储和网络，并提供企业级数据管理和优化服务。 Cisco HyperFlex software中的Graphite界面存在数据伪造问题漏洞，该漏洞源于程序没有进行充分的授权控制。本地攻击者可通过连接Graphite服务并发送任意数据利用该漏洞向Graphite写入任意数据，并在该界面中显示无效的统计。
CVSS Information
N/A
Vulnerability Type
N/A