Описание
The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00255
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.
EPSS
Процентиль: 49%
0.00255
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-20