VDB
CNVD-2020-25351
CNVD-2020-25351
PUBLISHED
Cisco UCS Director和Cisco UCS Director Express for Big Data都是美国思科（Cisco）公司的产品。Cisco UCS Director是一套私有云基础架构即服务（IaaS）的异构平台。Cisco UCS Director Express for Big Data是一套针对大数据集群的基础架构统一管理平台。 Cisco UCS Director和UCS Director Express for Big Data中的REST API存在路径遍历漏洞，该漏洞程序未能充分验证发送到REST API的用户输入，远程攻击者可通过发送特制的请求利用该漏洞在系统上执行代码。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cnvd | Cisco UCS Director 6.0.1.1 | |
| cnvd | Cisco UCS Director 6.5.0.1 | |
| Cisco UCS Director 6.7.3.0 | ||
| Cisco UCS Director 6.5.0.4 | ||
| cnvd | Cisco UCS Director 6.7.0.0 | |
| Cisco UCS Director 6.5.0.0 | ||
| Cisco UCS Director 6.7.1.0 | ||
| cnvd | Cisco UCS Director 6.0.1.0 | |
| Cisco UCS Director 6.6.2.0 | ||
| cnvd | Cisco UCS Director 6.0.0.0 | |
| Cisco UCS Director 6.7.2.0 | ||
| cnvd | Cisco UCS Director 6.5.0.2 | |
| Cisco UCS Director 6.5.0.2 | ||
| Cisco UCS Director Express for Big Data <=3.7.3.0 | ||
| cnvd | Cisco UCS Director 6.0.1.2 | |
| cnvd | Cisco UCS Director 6.5.0.3 | |
| cnvd | Cisco UCS Director 6.7.2.0 | |
| cnvd | Cisco UCS Director Express for Big Data <=3.7.3.0 | |
| cnvd | Cisco UCS Director 6.0.0.1 | |
| Cisco UCS Director 6.0.0.1 |
…and 18 more
Timeline
- Apr 16, 2020 CVE ID Reserved
- Apr 16, 2020 CVE Updated
- Apr 28, 2020 CVE Published