Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33f4-9hr4-253g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.

EPSS

Процентиль: 46%
0.00233
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.3
nvd
больше 6 лет назад

A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость службы сбора статистики гиперконвергентной инфраструктуры Cisco HyperFlex, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 46%
0.00233
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345