Cisco Integrated Management Controller CVE-2017-6617 Session Hijacking Vulnerability

Bugtraq ID:	97929
Class:	Design Error
CVE:	CVE-2017-6617
Remote:	Yes
Local:	No
Published:	Apr 19 2017 12:00AM
Updated:	May 02 2017 12:06AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System 3.0(1c) Cisco Integrated Management Controller 0
Not Vulnerable:	Cisco Unified Computing System 3.0(1d)

Cisco Integrated Management Controller CVE-2017-6617 Session Hijacking Vulnerability

Cisco Integrated Management Controller is prone to a session-hijacking vulnerability.

This may allow an attacker to to hijack an authenticated userâ??s browser session.

This issue is being tracked by Cisco bug ID CSCvd14583.

Cisco Integrated Management Controller CVE-2017-6617 Session Hijacking Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Integrated Management Controller CVE-2017-6617 Session Hijacking Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco Integrated Management Controller CVE-2017-6617 Session Hijacking Vulnerability

References:

• Cisco Homepage (Cisco )
  
• cisco-sa-20170419-cimc2:Cisco Integrated Management Controller User Session Hija (Cisco)