Directory traversal

2020-04-1521:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

JSON

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CPENameOperatorVersion
ucs_directoreq6.0.0.0
ucs_directoreq6.5.0.0
ucs_directoreq6.6.0.0
ucs_directoreq6.6.1.0
ucs_directoreq6.7.0.0
ucs_directoreq6.7.1.0
ucs_directoreq6.0.0.1
ucs_directoreq6.0.1.0
ucs_directoreq6.0.1.1
ucs_directoreq6.0.1.2

Name	Operator	Version
ucs_director	eq	6.0.0.0
ucs_director	eq	6.5.0.0
ucs_director	eq	6.6.0.0
ucs_director	eq	6.6.1.0
ucs_director	eq	6.7.0.0
ucs_director	eq	6.7.1.0
ucs_director	eq	6.0.0.1
ucs_director	eq	6.0.1.0
ucs_director	eq	6.0.1.1
ucs_director	eq	6.0.1.2