First published: Sat Dec 05 2015(Updated: )
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco UCS Central Software | =1.3\(0.1\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-6388 is considered to have a medium severity as it allows for server-side request forgery (SSRF) attacks.
To mitigate CVE-2015-6388, it is recommended to upgrade to a secure version of Cisco UCS Central software that is not affected by this vulnerability.
CVE-2015-6388 specifically affects Cisco Unified Computing System Central software version 1.3(0.1).
CVE-2015-6388 can facilitate server-side request forgery (SSRF) attacks, potentially allowing attackers to interact with internal systems.
CVE-2015-6388 was disclosed in December 2015.