Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Cisco HyperFlex HX-Series 3.5(2a) Clear all filters
TI-2019-01293 CVE-2019-1667 · GHSA-4mrw-m8gp-8hgx

Cisco HyperFlex Arbitrary Statistics Write Vulnerability

Priority LOW 15

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00174 Published 2019-02-21 Fixed in 3.5(2a) CWE-345
TI-2019-01292 CVE-2019-1666 · GHSA-268p-g9gf-2gh5

Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability

Priority LOW 34

A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02208 Published 2019-02-21 Fixed in 3.5(2a) CWE-284
TI-2019-01290 CVE-2019-1664 · GHSA-jjrr-rj68-xhw3

Cisco HyperFlex Software Unauthenticated Root Access Vulnerability

Priority LOW 36

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00334 Published 2019-02-21 Fixed in 3.5(2a) CWE-284