CVE-2013-1182

The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@cisco.com

Published

2013-04-25

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Unified Computing System 6120xp Fabric Interconnect (Cisco)
• Unified Computing System 6140xp Fabric Interconnect (Cisco)
• Unified Computing System 6248up Fabric Interconnect (Cisco)
• Unified Computing System 6296up Fabric Interconnect (Cisco)
• Unified Computing System Infrastructure And Unified Computing System Software (Cisco)
• Unified Computing System Integrated Management Controller (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti