{"id":"CVE-2013-1182","aliases":["EUVD-2013-1222","GHSA-r276-g96q-g9m3"],"status":"published","title":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS...","description":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03509,"percentile":0.89276,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-04-25T10:00:00Z","modified":"2026-06-16T23:50:58Z","products":[{"vendor":"cisco","product":"unified_computing_system_6120xp_fabric_interconnect"},{"vendor":"cisco","product":"unified_computing_system_6140xp_fabric_interconnect"},{"vendor":"cisco","product":"unified_computing_system_6248up_fabric_interconnect"},{"vendor":"cisco","product":"unified_computing_system_6296up_fabric_interconnect"},{"vendor":"cisco","product":"unified_computing_system_infrastructure_and_unified_computing_system_software"},{"vendor":"cisco","product":"unified_computing_system_integrated_management_controller"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1182"},{"url":"https://github.com/advisories/GHSA-r276-g96q-g9m3"}],"sources":{"cve":[{"id":"CVE-2013-1182","description":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.","status":"published","published":"2013-04-25T10:00:00Z","modified":"2024-09-16T22:25:30.664Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1222","description":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.","status":"published","published":"2013-04-25T10:00:00Z","modified":"2024-09-16T22:25:30Z","updated_at":"2026-11-03T00:55:02.946444Z"}],"ghsa":[{"id":"GHSA-r276-g96q-g9m3","title":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS...","description":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.","status":"published","published":"2022-05-17T05:11:14Z","modified":"2023-01-28T05:03:30Z","updated_at":"2026-11-02T14:43:59.339521Z"}],"nvd":[{"id":"CVE-2013-1182","description":"The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.","status":"published","published":"2013-04-25T10:55:01.683Z","modified":"2026-06-16T23:50:58.937Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:25.704053Z"}]}}