imPC@ndo IT

Tracker / CVE-2019-1908

CVE-2019-1908

High 7.5

A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the affected software. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional attacks.

Affected products and versions

cisco integrated_management_controller_supervisor · 2.0.0.0 → 2.0\(13o\)
cisco integrated_management_controller_supervisor · 3.0.0.0 → 3.0\(4k\)
cisco integrated_management_controller_supervisor · 4.0.0.0 → 4.0\(2f\)
cisco integrated_management_controller_supervisor · 4.0.0.0 → 4.0\(4b\)
cisco unified_computing_system

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References