high8.8
CVE-2016-1374
The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands…
Impact
The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Computing System Performance Manager | Versions 1.0_base, 1.1.0, 1.1.1, 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf
- http://www.securityfocus.com/bid/92044
- http://www.securitytracker.com/id/1036410
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160720-ucsperf
- http://www.securityfocus.com/bid/92044
- http://www.securitytracker.com/id/1036410