CVE-2020-26063: Cisco Integrated Management Controller Software Authorization Bypass Vulnerability
A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attacker could exploit this vulnerability by sending malicious requests to an API endpoint. An exploit could allow the attacker to download files from or modify limited configuration options on the affected system.There are no workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26063?
CVE-2020-26063 has been classified as a high severity vulnerability due to its potential impact on system authorization.
How do I fix CVE-2020-26063?
To address CVE-2020-26063, it is recommended to update the Cisco Integrated Management Controller to the latest version provided by Cisco.
What type of vulnerability is CVE-2020-26063?
CVE-2020-26063 is an authorization bypass vulnerability found in the API endpoints of Cisco Integrated Management Controller.
Who is affected by CVE-2020-26063?
CVE-2020-26063 affects users of Cisco Integrated Management Controller that have improperly configured authorization checks.
Can CVE-2020-26063 be exploited remotely?
Yes, CVE-2020-26063 can be exploited remotely by an authenticated attacker to perform unauthorized actions on the system.