Description
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
Scores
EPSS
0.0351
EPSS Percentile
88.0%
Details
CWE
CWE-264
Status
published
Products (16)
cisco/unified_computing_system_6120xp_fabric_interconnect
cisco/unified_computing_system_6140xp_fabric_interconnect
cisco/unified_computing_system_6248up_fabric_interconnect
cisco/unified_computing_system_6296up_fabric_interconnect
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.1
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.3\(1c\)
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.3\(1m\)
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.3\(1n\)
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.3\(1o\)
cisco/unified_computing_system_infrastructure_and_unified_computing_system_software
1.3\(1p\)
... and 6 more
Published
Apr 25, 2013
Tracked Since
Feb 18, 2026