Hyperflex Hx Data Platform
CVE-2018-15382
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Lifecycle Timeline
1DescriptionNVD
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit this vulnerability by accessing the static signing key from one HyperFlex system and using it to generate valid, signed session tokens for another HyperFlex system. A successful exploit could allow the attacker to access the HyperFlex Web UI of a system for which they are not authorized.
AnalysisAI
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-642. A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit this vulnerability by accessing the static signing key from one HyperFlex system and using it to generate valid, signed session tokens for another HyperFlex system. A successful exploit could allow the attacker to access the HyperFlex Web UI of a system for which they are not authorized. Affected products include: Cisco Hyperflex Hx Data Platform.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Hyperflex Hx Data Platform
View allMultiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, rem
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, rem
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated
A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote
A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain
A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated
A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an au
A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to
A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to r
A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote
A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the
Same weakness CWE-642 – External Control of Critical State Data
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today