CVE-2020-3248

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@cisco.com

Published

2020-04-15

Last modified

2024-11-15

Weaknesses

CWE-20, CWE-22

Affected products

• Cisco Ucs Director (Cisco)
• Ucs Director (Cisco)
• Ucs Director Express For Big Data (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E
• https://www.zerodayinitiative.com/advisories/ZDI-20-543/