cisco-sa-20190626-dcnm-bypass: Cisco Data Center Network Manager Authentication Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-bypass
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190626-dcnm-bypass?
The severity of cisco-sa-20190626-dcnm-bypass is considered high due to the potential for unauthenticated remote access and execution of arbitrary actions.
How do I fix cisco-sa-20190626-dcnm-bypass?
To fix cisco-sa-20190626-dcnm-bypass, you should apply the security patch or update provided by Cisco for affected versions of Data Center Network Manager.
Who is affected by cisco-sa-20190626-dcnm-bypass?
Organizations using Cisco Data Center Network Manager are affected by cisco-sa-20190626-dcnm-bypass.
What actions are vulnerable in cisco-sa-20190626-dcnm-bypass?
An attacker can execute arbitrary actions with administrative privileges on devices affected by cisco-sa-20190626-dcnm-bypass.
Is cisco-sa-20190626-dcnm-bypass remotely exploitable?
Yes, cisco-sa-20190626-dcnm-bypass is remotely exploitable by an unauthenticated attacker.