CVE-2020-3243: Cisco UCS Director isEnableRestKeyAccessCheckForUser Authentication Bypass Vulnerability
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Other sources
This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco UCS Director. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the X-Cloupia-Request-Key field in requests. The issue results from the lack of proper validation of the user-supplied field prior to using it in authentication operations. An attacker can leverage this vulnerability to bypass authentication on the system.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3243?
CVE-2020-3243 is a vulnerability that allows remote attackers to bypass authentication on affected installations of Cisco UCS Director.
How severe is CVE-2020-3243?
CVE-2020-3243 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2020-3243?
CVE-2020-3243 affects Cisco UCS Director versions 6.0.0.0 to 6.7.3.0 and Cisco UCS Director Express for Big Data version 3.7.3.0.
What is the specific flaw in CVE-2020-3243?
The specific flaw in CVE-2020-3243 exists in the processing of the X-Cloupia-Request-Key field in requests.
Are there any references for CVE-2020-3243?
Yes, you can find more information about CVE-2020-3243 in the following references: 1. Cisco Security Advisory: [link] 2. ZDI-20-540: [link] 3. Packet Storm Security: [link]