CVE-2017-3817

https://notcve.org/view.php?id=CVE-2017-3817

07 Apr 2017 — A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.5(0.1) 6.0(0.0). Una vulnerabilidad en la funcionalidad de comprobación de recursos basada en roles del Director del Unified Computing System (UCS) de Cisco podría permitir a un atacante remoto autenticado ver informació... • http://www.securityfocus.com/bid/97430 • CWE-863: Incorrect Authorization •