CVE-2019-1958

CWE-352 — Cross-Site Request Forgery (CSRF)4 documents4 sources
Severity
8.8HIGH
EPSS
0.2%
top 57.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Hyperflex Hx-seriesCisco Hyperflex HX Data Platform
Timeline
PublishedAug 8
Latest updateMay 24

Description

A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the pr…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5cisco/cisco_hyperflex_hx-seriesunspecified — n/a

🔴Vulnerability Details

2
GHSA
GHSA-9jvv-vrqg-9vhg: A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-s↗2022-05-24
▶
CVEList
Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability↗2019-08-08
▶

📋Vendor Advisories

1
Cisco
Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability↗2019-08-07
▶
CVE-2019-1958 (HIGH CVSS 8.8) | A vulnerability in the web-based ma | cvebase.io