Threats tagged 'ghsa-qxq7-4vcw-5677'

A vulnerability in the web-based management interface of Cisco UCS Central Software allows an authenticated remote attacker to execute arbitrary commands, write files, or disclose sensitive information. The flaw arises from insufficient validation of user input in HTTP requests. Exploitation requires valid user credentials. Cisco has released software updates to fix this issue, and no workarounds are available.