CVE-2018-15429
MEDIUMCisco HyperFlex HX Data Platform - Unauthenticated Sensitive Information Exposure via HTTP Request
Title source: llmDescription
A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based UI of an affected system. A successful exploit could allow the attacker to access files that may contain sensitive data.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hyperflex-uda
Scores
CVSS v3
5.3
EPSS
0.0112
EPSS Percentile
62.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-20
CWE-862
Status
published
Products (2)
cisco/hyperflex_hx_data_platform
2.6\(1d\)
cisco/hyperflex_hx_data_platform
3.0\(1a\)
Published
Oct 05, 2018
Tracked Since
Feb 18, 2026