CVE-2017-3817

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.5(0.1) 6.0(0.0).

• CWE-863

• http://www.securityfocus.com/bid/97430Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038194
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-directorVendor Advisory
• http://www.securityfocus.com/bid/97430Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038194
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-directorVendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3810A vulnerability in the web framework of Cisco Prime Service …
• CVE-2017-3811An XML External Entity vulnerability in Cisco WebEx Meetings…
• CVE-2017-3812A vulnerability in the implementation of Common Industrial P…
• CVE-2017-3813A vulnerability in the Start Before Logon (SBL) module of Ci…
• CVE-2017-3814A vulnerability in Cisco Firepower System Software could all…
• CVE-2017-3815An API Privilege vulnerability in Cisco TelePresence Server …
• CVE-2017-3818A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-3819A privilege escalation vulnerability in the Secure Shell (SS…
• CVE-2017-3820A vulnerability in Simple Network Management Protocol (SNMP)…
• CVE-2017-3821A vulnerability in the serviceability page of Cisco Unified …
• CVE-2017-3822A vulnerability in the logging subsystem of the Cisco Firepo…5.3
• CVE-2017-3823An issue was discovered in the Cisco WebEx Extension before …