Vulnerability Details CVE-2019-12634
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a missing authentication check in an API call. An attacker who can send a request to an affected system could cause all currently authenticated users to be logged off. Repeated exploitation could cause the inability to maintain a session in the web-based management portal.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.2%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 5.0
References
Products affected by CVE-2019-12634
-
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.2.0.3
-
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.2.0.4
-
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.2.0.5
-
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.2.0.6
-
cpe:2.3:a:cisco:ucs_director:6.6.0.0
-
cpe:2.3:a:cisco:ucs_director:6.6.1.0
-
cpe:2.3:a:cisco:ucs_director:6.7.0.0
-
cpe:2.3:a:cisco:ucs_director:6.7.1.0
-
cpe:2.3:a:cisco:ucs_director:6.7.2.0
-
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0
-
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0
-
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0
-
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0
-
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.2.0