Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Integrated Management Controller Software Authorization Bypass Vulnerability
Vulnerability Description
A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attacker could exploit this vulnerability by sending malicious requests to an API endpoint. An exploit could allow the attacker to download files from or modify limited configuration options on the affected system.There are no workarounds that address this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
特权管理不恰当
Vulnerability Title
Cisco?Integrated Management Controller 授权问题漏洞
Vulnerability Description
Cisco?Integrated Management Controller（IMC）是美国思科（Cisco）公司的一个用于服务器管理监控的集成管理软件。 Cisco Integrated Management Controller中的API endpoints存在授权问题漏洞，该漏洞是由于对API端点进行的不正确授权检查所致，成功利用此漏洞可能使攻击者从受影响的系统上下载文件或修改受限配置选项。
CVSS Information
N/A
Vulnerability Type
N/A