CVE-2021-1499 Cisco HyperFlex HX Data Platform File Upload Vulnerability

What is CVE-2021-1499?

CVE-2021-1499 is a medium-severity vulnerability in Cisco HyperFlex HX Data Platform, published on 6 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerability by sending a specific HTTP request to an affected device. A successful exploit could allow the attacker to upload files to the affected device with the permissions of the tomcat8 user.

Weakness: CWE-306

Which versions are affected by CVE-2021-1499?

It affects 1 product.

Products include Cisco Hyperflex Hx Data Platform.

How do I fix CVE-2021-1499?

No fix has been published for CVE-2021-1499 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-1499 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-1499 exists.

Public exploit code: 1 Metasploit module and 1 Nuclei template.

Other vulnerabilities in Cisco HyperFlex HX Data Platform

• CVE-2021-1497 Cisco HyperFlex HX Installer Virtual Machine Command Injection Exploited Critical 9.8
• CVE-2021-1498 Cisco HyperFlex HX Data Platform Command Injection Exploited Critical 9.8
• CVE-2018-15380 Cisco HyperFlex Software Command Injection Vulnerability High 8.8
• CVE-2018-15382 Cisco HyperFlex Software Static Signing Key Vulnerability High 8.6
• CVE-2019-1664 Cisco HyperFlex Software Unauthenticated Root Access Vulnerability High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-389x-22j4-jr37.