Cisco Nexus Dashboard Server Side Request Forgery Vulnerability

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

服务端请求伪造(SSRF)

Cisco Nexus Dashboard和Cisco Nexus Dashboard Insights 代码问题漏洞

Cisco Nexus Dashboard和Cisco Nexus Dashboard Insights都是美国思科（Cisco）公司的产品。Cisco Nexus Dashboard是一个单一控制台。能够简化数据中心网络的运营和管理。Cisco Nexus Dashboard Insights是一款面向数据中心网络的运行分析与故障诊断平台。 Cisco Nexus Dashboard和Cisco Nexus Dashboard Insights存在代码问题漏洞，该漏洞源于特定HTTP请求输入验证不当，可

N/A

N/A