Lucene search
HistoryApr 25, 2013 - 10:55 a.m.
CVE-2013-1182
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.3%
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
Affected configurations
Node
ciscounified_computing_system_infrastructure_and_unified_computing_system_softwareRange≤1.0
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.1
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1c\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1m\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1n\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1o\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1p\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1q\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1t\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1w\)
ORciscounified_computing_system_infrastructure_and_unified_computing_system_softwareMatch1.3\(1y\)
ciscounified_computing_system_6120xp_fabric_interconnectMatch-
ORciscounified_computing_system_6140xp_fabric_interconnectMatch-
ORciscounified_computing_system_6248up_fabric_interconnectMatch-
ORciscounified_computing_system_6296up_fabric_interconnectMatch-
ORciscounified_computing_system_integrated_management_controllerMatch-
Related
prion
prion
Authentication flaw
2013-04-25 10:55:00
cve
cve
CVE-2013-1182
2022-10-03 16:14:47
cvelist
cvelist
CVE-2013-1182
2022-10-03 16:14:47
cisco
cisco
Multiple Vulnerabilities in Cisco Unified Computing System
2013-04-24 16:00:00
openvas
openvas
Cisco Unified Computing System Multiple Vulnerabilities
2013-10-10 00:00:00
securityvulns
securityvulns
Cisco Unified Computing System multiple security vulnerabilities
2013-05-06 00:00:00
nessus
nessus
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.3%
Related for NVD:CVE-2013-1182