CVE-2020-3242

A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with administrative privileges to obtain confidential information from an affected device. The vulnerability exists because confidential information is returned as part of an API response. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to obtain the API key of another user, which would allow the attacker to impersonate the account of that user on the affected device. To exploit this vulnerability, the attacker must have administrative privileges on the device.

• CWE-200
• CWE-200

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-info-disclosure-gSMU8EKTVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-info-disclosure-gSMU8EKTVendor Advisory

Published

Jun 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3236A vulnerability in the CLI of Cisco Enterprise NFV Infrastru…6.7
• CVE-2020-3237A vulnerability in the Cisco Application Framework component…6.3
• CVE-2020-3238A vulnerability in the Cisco Application Framework component…8.1
• CVE-2020-3239Multiple vulnerabilities in the REST API of Cisco UCS Direct…8.8
• CVE-2020-3240Multiple vulnerabilities in the REST API of Cisco UCS Direct…7.3
• CVE-2020-3241A vulnerability in the orchestration tasks of Cisco UCS Dire…6.5
• CVE-2020-3243Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8
• CVE-2020-3244A vulnerability in the Enhanced Charging Service (ECS) funct…5.3
• CVE-2020-3245A vulnerability in the web application of Cisco Smart Softwa…5.3
• CVE-2020-3246A vulnerability in the web server of Cisco Umbrella could al…4.3
• CVE-2020-3247Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8
• CVE-2020-3248Multiple vulnerabilities in the REST API of Cisco UCS Direct…9.8