CVE-2018-15405

{"id": "CVE-2018-15405", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2018-10-05T14:29:08.903", "references": [{"url": "http://www.securitytracker.com/id/1041779", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-imcs-ucsd-id", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly include the access level of the web interface user. An attacker who has valid application credentials could exploit this vulnerability by sending a crafted HTTP request to the web interface. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional reconnaissance attacks."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz web para conjuntos de caracter\u00edsticas espec\u00edficas de Cisco Integrated Management Controller (IMC) Supervisor y Cisco UCS Director podr\u00eda permitir que un atacante remoto autenticado acceda a informaci\u00f3n sensible. La vulnerabilidad se debe a una comprobaci\u00f3n de autorizaci\u00f3n que no incluye debidamente el nivel de acceso del usuario de la interfaz web. Un atacante en posesi\u00f3n de credenciales v\u00e1lidas de la aplicaci\u00f3n podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de una petici\u00f3n HTTP manipulada a la interfaz web. Su explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante vea informaci\u00f3n sensible que pertenece a otros usuarios. As\u00ed, el atacante podr\u00eda emplear esta informaci\u00f3n para llevar a cabo ataques de reconocimiento adicionales."}], "lastModified": "2020-08-31T20:34:44.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:ucs_director:2.1\\(0.0\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6EB0751-9FD7-4292-82F6-4DE9BBDA223D"}, {"criteria": "cpe:2.3:a:cisco:ucs_director:6.6\\(1.0\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80A88AA8-DA73-4FDA-90A9-FDB9F58FD42B"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}