CVE-2017-3817

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.5(0.1) 6.0(0.0).
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:unified_computing_system_director:5.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:6.0.0.0:*:*:*:*:*:*:*

History

21 Nov 2024, 03:26

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/97430 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/97430 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1038194 - () http://www.securitytracker.com/id/1038194 -
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director - Vendor Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director - Vendor Advisory

Information

Published : 2017-04-07 17:59

Updated : 2024-11-21 03:26


NVD link : CVE-2017-3817

Mitre link : CVE-2017-3817

CVE.ORG link : CVE-2017-3817


JSON object : View

Products Affected

cisco

  • unified_computing_system_director
CWE
CWE-863

Incorrect Authorization