imPC@ndo IT

Tracker / CVE-2015-6259

CVE-2015-6259

High 9.4

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

Affected products and versions

cisco integrated_management_controller_supervisor · … → 1.0.0.0
cisco unified_computing_system_director
cisco unified_computing_system_director · … → 5.2.0.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References