CVE-2013-1182

The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.

Published: Apr 25, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-1182
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	-	1.0.x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.1	1.1.x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1c)	1.3(1c).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1m)	1.3(1m).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1n)	1.3(1n).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1o)	1.3(1o).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1p)	1.3(1p).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1q)	1.3(1q).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1t)	1.3(1t).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1w)	1.3(1w).x
cisco / unified_computing_system_infrastructure_and_unified_computing_system_software	1.3(1y)	1.3(1y).x

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti

Vulnerability Database

289,599

CVE-2013-1182