CVE-2019-15976: Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15976?
CVE-2019-15976 is a vulnerability in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) that allows an unauthenticated remote attacker to bypass authentication and execute arbitrary actions with administrative privileges.
How severe is CVE-2019-15976?
CVE-2019-15976 has a severity rating of 9.8, which is considered critical.
What software is affected by CVE-2019-15976?
Cisco Data Center Network Manager version up to exclusive 11.3(1) is affected by CVE-2019-15976.
How can an attacker exploit CVE-2019-15976?
An unauthenticated remote attacker can exploit CVE-2019-15976 by bypassing authentication and executing arbitrary actions with administrative privileges on an affected device.
Are there any references for CVE-2019-15976?
Yes, you can find more information about CVE-2019-15976 at the following references: [Link1](http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html) and [Link2](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass).