What is the severity of CVE-2019-1946?

The severity of CVE-2019-1946 is rated as medium with a CVSS score of 6.5.

How can an attacker exploit CVE-2019-1946?

An attacker can exploit CVE-2019-1946 by bypassing authentication and gaining limited access to the web-based management interface of Cisco NFVIS.

What software is affected by CVE-2019-1946?

The affected software is Cisco Enterprise Network Function Virtualization Infrastructure with versions up to 3.10.1.

What is the CWE for CVE-2019-1946?

The CWE for CVE-2019-1946 is CWE-287, which relates to an improper authentication vulnerability.

Where can I find more information about CVE-2019-1946?

You can find more information about CVE-2019-1946 in the Cisco Security Advisory linked in the references.

Vulnerability/
CVE-2019-1946

medium

6.5

CWE

287

7/8/2019

8/8/2019

19/11/2024

CVE-2019-1946: Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability

First published: Thu Aug 08 2019(Updated: )

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface. The vulnerability is due to an incorrect implementation of authentication in the web-based management interface. An attacker could exploit this vulnerability by sending a crafted authentication request to the web-based management interface on an affected system. A successful exploit could allow the attacker to view limited configuration details and potentially upload a virtual machine image.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Enterprise Network Functions Virtualization Infrastructure Software	<3.10.1

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-nfvis-authbypass

Frequently Asked Questions

What is the severity of CVE-2019-1946?
The severity of CVE-2019-1946 is rated as medium with a CVSS score of 6.5.
How can an attacker exploit CVE-2019-1946?
An attacker can exploit CVE-2019-1946 by bypassing authentication and gaining limited access to the web-based management interface of Cisco NFVIS.
What software is affected by CVE-2019-1946?
The affected software is Cisco Enterprise Network Function Virtualization Infrastructure with versions up to 3.10.1.
What is the CWE for CVE-2019-1946?
The CWE for CVE-2019-1946 is CWE-287, which relates to an improper authentication vulnerability.
Where can I find more information about CVE-2019-1946?
You can find more information about CVE-2019-1946 in the Cisco Security Advisory linked in the references.

agent/type
agent/softwarecombine
agent/severity
agent/references
agent/weakness
agent/title
agent/author
agent/description
agent/event
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco enterprise network functions virtualization infrastructure software

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.