CVE-2021-1135: Cisco Data Center Network Manager REST API Vulnerabilities
First published: Wed Jan 20 2021(Updated: )
Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Data Center Network Manager | <11.4\(1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for these vulnerabilities in Cisco Data Center Network Manager?
The vulnerability ID for these vulnerabilities in Cisco Data Center Network Manager is CVE-2021-1135.
What is the severity of CVE-2021-1135?
The severity of CVE-2021-1135 is medium with a CVSS score of 4.3.
How can an attacker exploit this vulnerability?
An authenticated, remote attacker can exploit this vulnerability to view, modify, and delete data without proper authorization.
What is the affected software?
The affected software is Cisco Data Center Network Manager 11.4(1) and earlier versions.
Where can I find more information about these vulnerabilities?
You can find more information about these vulnerabilities in Cisco Data Center Network Manager in the advisory provided by Cisco.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/title
- agent/weakness
- agent/severity
- agent/event
- agent/tags
- agent/description
- agent/first-publish-date
- vendor/cisco
- canonical/cisco data center network manager