csirt@kutim:~/threat-intel/cve/CVE-2020-26062

Katalog CVE

CVSS 5.3 · Medium EPSS 0,84%

Kerentanan Observable Discrepancy pada cisco unified computing system. Skor CVSS 3.1 5.3 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication attempt. An attacker could exploit this vulnerability by sending authentication requests to the affected application. A successful exploit could allow the attacker to confirm the names of administrative user accounts for use in further attacks.There are no workarounds that address this vulnerability.

Rincian

Terbit di NVD
18 November 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.3 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-203: Observable Discrepancy
EPSS (30 hari)
0,84% peluang dieksploitasi; lebih tinggi dari 56,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco unified computing system Versi 3.2(1d)
cisco unified computing system Versi 3.2(2b)
cisco unified computing system Versi 3.2(2c)
cisco unified computing system Versi 3.2(2d)
cisco unified computing system Versi 3.2(2e)
cisco unified computing system Versi 3.2(2f)
cisco unified computing system Versi 3.2(3a)
cisco unified computing system Versi 3.2(3b)
cisco unified computing system Versi 3.2(3d)
cisco unified computing system Versi 3.2(3e)
cisco unified computing system Versi 3.2(3g)
cisco unified computing system Versi 3.2(3h)
cisco unified computing system Versi 3.2(3i)
cisco unified computing system Versi 3.2(3j)
cisco unified computing system Versi 3.2(3k)
cisco unified computing system Versi 3.2(3l)
cisco unified computing system Versi 3.2(3n)
cisco unified computing system Versi 3.2(3o)
cisco unified computing system Versi 3.2(3p)
cisco unified computing system Versi 4.0(1a)
cisco unified computing system Versi 4.0(1b)
cisco unified computing system Versi 4.0(1c)
cisco unified computing system Versi 4.0(1d)
cisco unified computing system Versi 4.0(2a)
cisco unified computing system Versi 4.0(2b)
cisco unified computing system Versi 4.0(2d)
cisco unified computing system Versi 4.0(2e)
cisco unified computing system Versi 4.0(4a)
cisco unified computing system Versi 4.0(4b)
cisco unified computing system Versi 4.0(4c)
cisco unified computing system Versi 4.0(4d)
cisco unified computing system Versi 4.0(4e)
cisco unified computing system Versi 4.0(4f)
cisco unified computing system Versi 4.0(4g)
cisco unified computing system Versi 4.0(4h)
cisco unified computing system Versi 4.0(4i)
cisco unified computing system Versi 4.1(1a)
cisco unified computing system Versi 4.1(1b)
cisco unified computing system Versi 4.1(1c)
cisco unified computing system Versi 4.1(1d)
cisco unified computing system Versi 4.1(1e)
cisco unified computing system Versi 4.1(2a)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.