CVE-2020-26062
Cisco Integrated Management Controller Username Enumeration Vulnerability
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application.
The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication attempt. An attacker could exploit this vulnerability by sending authentication requests to the affected application. A successful exploit could allow the attacker to confirm the names of administrative user accounts for use in further attacks.There are no workarounds that address this vulnerability.
Una vulnerabilidad en Cisco Integrated Management Controller podría permitir que un atacante remoto no autenticado enumere nombres de usuario válidos dentro de la aplicación vulnerable. La vulnerabilidad se debe a diferencias en las respuestas de autenticación enviadas desde la aplicación como parte de un intento de autenticación. Un atacante podría aprovechar esta vulnerabilidad enviando solicitudes de autenticación a la aplicación afectada. Una explotación exitosa podría permitir al atacante confirmar los nombres de las cuentas de usuario administrativas para usarlas en ataques posteriores. No existen workarounds que aborden esta vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-09-24 CVE Reserved
- 2024-11-18 CVE Published
- 2024-11-18 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-203: Observable Discrepancy
CAPEC
References (5)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||