CVE-2019-1666: Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability
A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted requests to the Graphite service. A successful exploit could allow the attacker to retrieve any statistics from the Graphite service. Versions prior to 3.5(2a) are affected.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Cisco HyperFlex software vulnerability?
The vulnerability ID is CVE-2019-1666.
What is the severity level of CVE-2019-1666?
The severity level of CVE-2019-1666 is medium, with a severity value of 5.3.
How can an attacker exploit CVE-2019-1666?
An attacker can exploit CVE-2019-1666 by sending crafted requests to the Graphite service of the Cisco HyperFlex software.
Is authentication required to exploit CVE-2019-1666?
No, authentication is not required to exploit CVE-2019-1666.
Where can I find more information about CVE-2019-1666?
You can find more information about CVE-2019-1666 on the Cisco Security Advisory and SecurityFocus websites.