Описание
Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00058
Низкий
6.6 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.
EPSS
Процентиль: 18%
0.00058
Низкий
6.6 Medium
CVSS2
Дефекты
CWE-22