Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-20263 EUVD-2023-24442GHSA-fr6h-cvqr-2jq8

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker t…

Published Sep 6, 2023 · Updated Nov 21, 2024 · Assigned by cisco

Description

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.


This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.

Affected products

VendorProductAffectedFixed
Cisco Cisco HyperFlex HX Data Platform 4.0(1a), 4.0(1b), 4.0(2a), 4.0(2b), 4.0(2c), 4.0(2d), 4.0(2e), 4.0(2f), 4.5(1a), 4.5(2a), 4.5(2b), 4.5(2c), 4.5(2d), 4.5(2e), 5.0(1a), 5.0(1b), 5.0(1c), 5.0(2a), 5.0(2b) —

References