CVE-2020-3249
Published Apr 15, 2020
Last updated 5 years ago
Overview
- Description
- Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 3.0
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5F6460C-AD67-4B0A-A900-798E7A2A92C3"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30AB6069-3180-4D00-9261-F86D4EB302A7"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E96C895-C82E-4436-B1F3-519BC7B5B1F8"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A554A288-54F3-4858-AE67-5562963128C7"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC3EFC64-7DB5-4811-A7D4-D86DABFD3C8E"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.0.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43431A81-FA16-400F-91EC-7502F834EDD9"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DB174AA-261E-4252-AF4E-463EB72309D2"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AD53EF5-5CCE-4080-A96B-52DEFB498230"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0EB6B23-4681-4C7C-816A-971D9D77D4A1"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76C8C068-3B64-4619-8B72-4C619BE5990E"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4775D03D-021E-4D73-8194-5B0E3BCEC14A"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F95E9D60-7976-4CFB-B36B-0BC6675FA383"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E99B2DD-0E27-42FE-AE41-BE9FE8E78D4F"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7601151-DA20-4CE3-9B9B-BB60AB5FB5A7"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53FB8D53-BF77-443F-947A-79A6268CCC5B"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D16313A1-5D0B-4C91-B476-A9352A11AEE4"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.7.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F5782B5-C997-4438-82E4-4D2463CD1E15"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director:6.7.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC013D67-262C-4D5C-BF51-4CB3A5D293FB"
},
{
"criteria": "cpe:2.3:a:cisco:ucs_director_express_for_big_data:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44C97153-7B77-44DA-898D-FF377A7F2E18",
"versionEndIncluding": "3.7.3.0"
}
],
"operator": "OR"
}
]
}
]