What is the severity of CVE-2019-1867?

CVE-2019-1867 is classified as a high severity vulnerability due to its potential to allow unauthorized access to the REST API.

How do I fix CVE-2019-1867?

To fix CVE-2019-1867, update the Cisco Elastic Services Controller to a version later than 4.5.

What vulnerability does CVE-2019-1867 exploit?

CVE-2019-1867 exploits improper validation of API requests in the REST API of Cisco Elastic Services Controller.

Who is affected by CVE-2019-1867?

CVE-2019-1867 affects Cisco Elastic Services Controller versions 4.1 to 4.5.

Can CVE-2019-1867 be exploited remotely?

Yes, CVE-2019-1867 can be exploited by an unauthenticated remote attacker.

Vulnerability/
CVE-2019-1867

critical

CWE

287

10/5/2019

19/11/2024

CVE-2019-1867: Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability

First published: Fri May 10 2019(Updated: )

A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted request to the REST API. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on an affected system.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Elastic Services Controller	>=4.1<4.5

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190507-esc-authbypass

Frequently Asked Questions

What is the severity of CVE-2019-1867?
CVE-2019-1867 is classified as a high severity vulnerability due to its potential to allow unauthorized access to the REST API.
How do I fix CVE-2019-1867?
To fix CVE-2019-1867, update the Cisco Elastic Services Controller to a version later than 4.5.
What vulnerability does CVE-2019-1867 exploit?
CVE-2019-1867 exploits improper validation of API requests in the REST API of Cisco Elastic Services Controller.
Who is affected by CVE-2019-1867?
CVE-2019-1867 affects Cisco Elastic Services Controller versions 4.1 to 4.5.
Can CVE-2019-1867 be exploited remotely?
Yes, CVE-2019-1867 can be exploited by an unauthenticated remote attacker.

collector/nvd-index
agent/type
agent/softwarecombine
agent/severity
agent/weakness
agent/title
agent/references
agent/author
agent/description
agent/tags
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
vendor/cisco
canonical/cisco elastic services controller
version/cisco elastic services controller/4.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2019-1867?
CVE-2019-1867 is classified as a high severity vulnerability due to its potential to allow unauthorized access to the REST API.
How do I fix CVE-2019-1867?
To fix CVE-2019-1867, update the Cisco Elastic Services Controller to a version later than 4.5.
What vulnerability does CVE-2019-1867 exploit?
CVE-2019-1867 exploits improper validation of API requests in the REST API of Cisco Elastic Services Controller.
Who is affected by CVE-2019-1867?
CVE-2019-1867 affects Cisco Elastic Services Controller versions 4.1 to 4.5.
Can CVE-2019-1867 be exploited remotely?
Yes, CVE-2019-1867 can be exploited by an unauthenticated remote attacker.