CVE:CVE-2019-1857
CNNVD:CNNVD-201905-049
Cisco HyperFlex HX-Series是美国思科（Cisco）公司的一套分布式文件系统。该系统支持多个虚拟机管理程序，主要提供企业级数据管理和优化服务。
Cisco HyperFlex HX-Series中基于Web的管理界面存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。
solution:Upgrade cisco hx220c_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx240c_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx240c_large_form_factor_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx220c_all_nvme_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx220c_af_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx240c_af_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco hx220c_edge_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_b200_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_b480_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_c480_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_c125_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_c220_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_c240_m5_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a); Upgrade cisco ucs_c480_ml_firmware to a higher version than 3.0(1a,and avoid the version 3.0(1a)