CVE-2015-6259

Опубликовано: 04 сент. 2015

Источник: nvd

CVSS2: 9.4

EPSS Низкий

Описание

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs
Vendor Advisory
http://www.securitytracker.com/id/1033451
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs
Vendor Advisory
http://www.securitytracker.com/id/1033451
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*

Версия до 1.0.0.0 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:cisco:unified_computing_system_director:*:*:*:*:*:*:*:*

Версия до 5.2.0.0 (включая)

cpe:2.3:a:cisco:unified_computing_system_director:3.4_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:4.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:4.1_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system_director:5.1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01714

Низкий

9.4 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-gjjm-x2xg-8xgc

github

больше 3 лет назад