Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ucs_director | Cisco | * | 4.0.0.2 (including) |
| Ucs_director | Cisco | 4.0.0.0 (including) | 4.0.0.0 (including) |
| Ucs_director | Cisco | 4.0.0.1 (including) | 4.0.0.1 (including) |