CVE-2018-15423 Cisco HyperFlex UI Clickjacking Vulnerability

Medium 4.7 Published 5 Oct 2018 Updated 26 Nov 2024

An unauthenticated remote attacker can trick users into clicking malicious links via clickjacking in the Cisco HyperFlex web UI, compromising device integrity.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-15423?

CVE-2018-15423 is a medium-severity vulnerability in Cisco HyperFlex HX-Series, published on 5 Oct 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted HTTP packets with malicious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malicious link.

Weakness: CWE-1021, CWE-693

Which versions are affected by CVE-2018-15423?

It affects 1 product.

Products include Cisco Hyperflex Hx Data Platform.

How do I fix CVE-2018-15423?

No fix has been published for CVE-2018-15423 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-15423 being exploited?

There is no known exploitation of CVE-2018-15423 in the wild and no public exploit code.

Sources

Also known as GHSA-9g5x-wr2w-vx7m.