PT-2020-17245 · Cisco · Cisco Ucs Director+2

Published 2020-05-06 · Updated 2021-10-26 · CVE-2020-3329

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller (IMC) Supervisor versions (affected versions not specified) Cisco UCS Director versions (affected versions not specified) Cisco UCS Director Express for Big Data versions (affected versions not specified)

Description A vulnerability in role-based access control could allow a read-only authenticated, remote attacker to disable user accounts on an affected system. The issue is due to incorrect allocation of the enable/disable action button under the role-based access control code. An attacker could exploit this by authenticating as a read-only user and then updating the roles of other users to disable them, potentially including administrative users.

Recommendations For Cisco Integrated Management Controller (IMC) Supervisor, update the role-based access control configuration to correctly allocate the enable/disable action button. For Cisco UCS Director, restrict access to user role updates for read-only users until a fix is applied. For Cisco UCS Director Express for Big Data, consider disabling the role update feature for read-only users as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2020-3329

Affected Products

Cisco Integrated Management Controller (Imc) Supervisor

Cisco Ucs Director

Cisco Ucs Director Express For Big Data

References · 3

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-Ar6BAguz · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3329 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3329 · Vendor Advisory