cisco-sa-20190904-finesse-ssrf: Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-finesse-ssrf
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190904-finesse-ssrf?
The severity of cisco-sa-20190904-finesse-ssrf is considered critical due to its potential to allow unauthorized access to sensitive systems.
How do I fix cisco-sa-20190904-finesse-ssrf?
To fix cisco-sa-20190904-finesse-ssrf, apply the recommended patches and updates provided by Cisco for the affected version of Cisco Finesse.
Who is affected by cisco-sa-20190904-finesse-ssrf?
Organizations using Cisco Finesse without the latest security updates are primarily affected by cisco-sa-20190904-finesse-ssrf.
What type of attack can be executed through cisco-sa-20190904-finesse-ssrf?
cisco-sa-20190904-finesse-ssrf allows for a server-side request forgery (SSRF) attack which can be exploited to access internal resources.
Is authentication required to exploit cisco-sa-20190904-finesse-ssrf?
No, an unauthenticated remote attacker can exploit cisco-sa-20190904-finesse-ssrf to bypass access controls.