CVE-2019-1666
Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability
- State
- Published
- Severity
- 5.3 Medium
- Published
- Feb 21, 2019
- Updated
- Nov 19, 2024
- Reserved
- Dec 6, 2018
Description
A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted requests to the Graphite service. A successful exploit could allow the attacker to retrieve any statistics from the Graphite service. Versions prior to 3.5(2a) are affected.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco HyperFlex HX-SeriesCisco |
|
References
- 107108vdb-entry
- 20190220 Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerabilityvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.