CVE-2013-1182

The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.

Published: Apr 25, 2013
Updated: Nov 9, 2025
CVE: CVE-2013-1182
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	-	1.0.x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.1	1.1.x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1c)	1.3(1c).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1m)	1.3(1m).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1n)	1.3(1n).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1o)	1.3(1o).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1p)	1.3(1p).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1q)	1.3(1q).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1t)	1.3(1t).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1w)	1.3(1w).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1y)	1.3(1y).x

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti

Vulnerability Database

317,105

CVE-2013-1182

Deep Security Visibility Without the Complexity