PT-2017-1788
CVE-2017-6604
·
تاريخ النشر
2017-04-07
·
تاريخ التحديث
2017-07-12
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Unified Computing System Central versions 3.1(2c)B
Cisco Integrated Management Controller (IMC) Software versions 3.1(2c)B
Description
The issue is related to an open redirect vulnerability in the web interface of the affected systems. This could allow a remote attacker to redirect users to a malicious web page. The vulnerability affects various Cisco products, including Unified Computing System (UCS) B-Series M3 and M4 Blade Servers and Unified Computing System (UCS) C-Series M3 and M4 Rack Servers.
Recommendations
For versions 3.1(2c)B, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾