CVEvulnerability
CVE-2019-1908
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-08-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the affected software. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional attacks.
Affected configurations
• cisco unified computing system 4.0\(1c\)hs3
• cisco integrated management controller supervisor (>= 2.0.0.0 < 2.0\(13o\))
• cisco integrated management controller supervisor (>= 3.0.0.0 < 3.0\(4k\))
• cisco integrated management controller supervisor (>= 4.0.0.0 < 4.0\(4b\))
• cisco integrated management controller supervisor (>= 4.0.0.0 < 4.0\(2f\))
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness