Cisco Integrated Management Controller Software Authorization Bypass Vulnerability

A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attacker could exploit this vulnerability by sending malicious requests to an API endpoint. An exploit could allow the attacker to download files from or modify limited configuration options on the affected system.There are no workarounds that address this vulnerability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

特权管理不恰当

Cisco?Integrated Management Controller 授权问题漏洞

Cisco?Integrated Management Controller（IMC）是美国思科（Cisco）公司的一个用于服务器管理监控的集成管理软件。 Cisco Integrated Management Controller中的API endpoints存在授权问题漏洞，该漏洞是由于对API端点进行的不正确授权检查所致，成功利用此漏洞可能使攻击者从受影响的系统上下载文件或修改受限配置选项。

N/A

N/A