CVE-2019-1876: Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability
First published: Thu Jun 20 2019(Updated: )
A vulnerability in the HTTPS proxy feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to use the Central Manager as an HTTPS proxy. The vulnerability is due to insufficient authentication of proxy connection requests. An attacker could exploit this vulnerability by sending a malicious HTTPS CONNECT message to the Central Manager. A successful exploit could allow the attacker to access public internet resources that would normally be blocked by corporate policies.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wide Area Application Services | =5.5\(7\) | |
| Cisco Wide Area Application Services | =6.1\(1\) | |
| Cisco Wide Area Application Services | =6.4\(3b\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1876?
CVE-2019-1876 is classified as a critical severity vulnerability due to the potential for unauthenticated remote access.
How do I fix CVE-2019-1876?
To mitigate CVE-2019-1876, it is recommended to upgrade Cisco Wide Area Application Services to the latest available version.
What types of attacks can exploit CVE-2019-1876?
CVE-2019-1876 can be exploited by attackers to leverage the Central Manager as an unauthorized HTTPS proxy.
Which Cisco Wide Area Application Services versions are affected by CVE-2019-1876?
The affected versions of Cisco Wide Area Application Services include 5.5(7), 6.1(1), and 6.4(3b).
Who can be affected by CVE-2019-1876?
Organizations using the vulnerable versions of Cisco Wide Area Application Services may be adversely affected if the vulnerability is exploited.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/title
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/cisco
- canonical/cisco wide area application services
- version/cisco wide area application services/5.5\(7\)
- version/cisco wide area application services/6.1\(1\)
- version/cisco wide area application services/6.4\(3b\)