CVE-2016-1374

HIGH · 8.8 CVSS Gepubliceerd: 28-07-2016 CWE-20

Beschrijving

The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.

Vendors

Cisco

Affected products

Unified Computing System Performance Manager

References

tools.cisco.com
www.securityfocus.com
www.securitytracker.com