Description
The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.
References
- 55034 third-party-advisory
- 20130925 Cisco Unified Computing System Fabric System Manager Man-in-the-Middle Vulnerability vendor-advisory