What’s Vulnerable › Vulnerabilities

CVE-2018-15429: Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-05 · updated 2026-06-17
• Weakness: CWE-20

Description

A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based UI of an affected system. A successful exploit could allow the attacker to access files that may contain sensitive data.

Affected products

• Cisco HyperFlex HX-Series: 2.6(1d), 3.0(1a)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hyperflex-uda
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-hyperflex-uda

Get alerted when CVE-2018-15429 or the next vulnerability affects your stack