cisco-sa-20180516-dna: Cisco Digital Network Architecture Center Unauthorized Access Vulnerability
A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180516-dna?
The severity of cisco-sa-20180516-dna is considered high due to the potential for unauthenticated remote access and privilege escalation.
How do I fix cisco-sa-20180516-dna?
To fix cisco-sa-20180516-dna, it is recommended to update the Cisco Digital Network Architecture Center to the latest version where the vulnerability has been addressed.
Who is affected by cisco-sa-20180516-dna?
Organizations using the Cisco Digital Network Architecture Center are affected by cisco-sa-20180516-dna.
What causes cisco-sa-20180516-dna?
cisco-sa-20180516-dna is caused by an insecure default configuration of the Kubernetes container management subsystem.
Can cisco-sa-20180516-dna be exploited remotely?
Yes, cisco-sa-20180516-dna can be exploited by an unauthenticated remote attacker.