cisco-sa-20180905-umbrella-api: Cisco Umbrella API Unauthorized Access Vulnerability
First published: Wed Sep 05 2018(Updated: )
A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this vulnerability to view and potentially modify data for their organization or other organizations. A successful exploit could allow the attacker to read or modify data across multiple organizations. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-api
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Umbrella |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180905-umbrella-api?
The severity of cisco-sa-20180905-umbrella-api is considered high due to the potential for unauthorized data access and modification.
How do I fix cisco-sa-20180905-umbrella-api?
To fix cisco-sa-20180905-umbrella-api, ensure that sufficient authentication configurations are implemented for the Cisco Umbrella API.
What type of attack is associated with cisco-sa-20180905-umbrella-api?
The attack associated with cisco-sa-20180905-umbrella-api involves authenticated, remote attackers exploiting insufficient authentication configurations.
Who is affected by cisco-sa-20180905-umbrella-api?
Organizations using the Cisco Umbrella API are affected by cisco-sa-20180905-umbrella-api, as attackers can access data across their organization and others.
What is the main cause of cisco-sa-20180905-umbrella-api?
The main cause of cisco-sa-20180905-umbrella-api is insufficient authentication configurations for the API interface of Cisco Umbrella.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco umbrella