CVE-2015-6259

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-6259
The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.

9.4 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:C/A:C

Exploitability : 10.0 / Impact : 9.2

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs Vendor Advisory
http://www.securitytracker.com/id/1033451 Third Party Advisory VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs Vendor Advisory
http://www.securitytracker.com/id/1033451 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:cisco:unified_computing_system_director:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:3.4_base:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:4.0_base:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:4.1_base:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_computing_system_director:5.1.0.1:*:*:*:*:*:*:*
History

21 Nov 2024, 02:34

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs - Vendor Advisory
References () http://www.securitytracker.com/id/1033451 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1033451 - Third Party Advisory, VDB Entry
Information

Published : 2015-09-04 01:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-6259

Mitre link : CVE-2015-6259

CVE.ORG link : CVE-2015-6259

JSON object : View

Products Affected

cisco

  • unified_computing_system_director
  • integrated_management_controller_supervisor
CWE
CWE-20

Improper Input Validation