CVE-2020-3240

Published: Apr 15, 2020Modified: Nov 21, 2024

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (19)

Products: Cisco: Ucs Director, Ucs Director Express For Big Data

Cisco

2 products

Ucs Director

Ucs Director Express For Big Data

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Cisco Ucs Director	Version 6.0.0.0
Cisco Ucs Director	Version 6.0.0.1
Cisco Ucs Director	Version 6.0.1.0
Cisco Ucs Director	Version 6.0.1.1
Cisco Ucs Director	Version 6.0.1.2
Cisco Ucs Director	Version 6.0.1.3
Cisco Ucs Director	Version 6.5.0.0
Cisco Ucs Director	Version 6.5.0.1
Cisco Ucs Director	Version 6.5.0.2
Cisco Ucs Director	Version 6.5.0.3
Cisco Ucs Director	Version 6.5.0.4
Cisco Ucs Director	Version 6.6.0.0
Cisco Ucs Director	Version 6.6.1.0
Cisco Ucs Director	Version 6.6.2.0
Cisco Ucs Director	Version 6.7.0.0
Cisco Ucs Director	Version 6.7.1.0
Cisco Ucs Director	Version 6.7.2.0
Cisco Ucs Director	Version 6.7.3.0
Cisco Ucs Director Express For Big Data	Up to 3.7.3.0