cisco-sa-20190619-imc-infodisclos: Cisco Integrated Management Controller Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow an attacker to view sensitive system data. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-infodisclos
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190619-imc-infodisclos?
The severity of cisco-sa-20190619-imc-infodisclos is classified as high due to the potential for unauthorized access to sensitive information.
How do I fix cisco-sa-20190619-imc-infodisclos?
To fix cisco-sa-20190619-imc-infodisclos, apply the latest security patches provided by Cisco for the Integrated Management Controller.
Who is affected by cisco-sa-20190619-imc-infodisclos?
Organizations using Cisco Integrated Management Controller are affected by cisco-sa-20190619-imc-infodisclos.
What is the impact of cisco-sa-20190619-imc-infodisclos?
The impact of cisco-sa-20190619-imc-infodisclos is that attackers could gain access to system usage information without authentication.
Is cisco-sa-20190619-imc-infodisclos an authenticated vulnerability?
No, cisco-sa-20190619-imc-infodisclos is an unauthenticated vulnerability, allowing remote attackers to exploit it without credentials.