Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82gm-q2vc-g3x3

Опубликовано: 16 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating system. An attacker could exploit this vulnerability by sending a crafted API request to Cisco vManage as a lower-privileged user and gaining access to sensitive information that they would not normally be authorized to access.

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating system. An attacker could exploit this vulnerability by sending a crafted API request to Cisco vManage as a lower-privileged user and gaining access to sensitive information that they would not normally be authorized to access.

EPSS

Процентиль: 42%
0.00201
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-202

Связанные уязвимости

CVSS3: 6.5
nvd
почти 4 года назад

A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected system. This vulnerability is due to insufficient API authorization checking on the underlying operating system. An attacker could exploit this vulnerability by sending a crafted API request to Cisco vManage as a lower-privileged user and gaining access to sensitive information that they would not normally be authorized to access.

CVSS3: 6.5
fstec
почти 4 года назад

Уязвимость компонента History API централизованной системой управления сетью Cisco SD-WAN vManage, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 42%
0.00201
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-202