cisco-sa-20200318-vmanage-xss: Cisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability

Published Mar 18, 2020

Updated

A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the vManage software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200318-vmanage-xss

Credit

Julien Legras(Synacktiv), Thomas Etrillard(Synacktiv)

Affected Software

1 affected component

Cisco SD-WAN vManage

Event History

Mar 18, 2020

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeaknessAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-16010

Frequently Asked Questions

What is the severity of cisco-sa-20200318-vmanage-xss?

The severity of cisco-sa-20200318-vmanage-xss is rated as high due to its potential impact on users of the Cisco SD-WAN vManage web UI.

How do I fix cisco-sa-20200318-vmanage-xss?

To fix cisco-sa-20200318-vmanage-xss, it is recommended to apply the latest patches and updates provided by Cisco for the SD-WAN vManage software.

Who is affected by cisco-sa-20200318-vmanage-xss?

Users of the Cisco SD-WAN vManage software are affected by the cisco-sa-20200318-vmanage-xss vulnerability.

What type of attack can cisco-sa-20200318-vmanage-xss facilitate?

The cisco-sa-20200318-vmanage-xss vulnerability can facilitate cross-site scripting (XSS) attacks against authenticated users of the vManage web interface.

Is authentication required to exploit cisco-sa-20200318-vmanage-xss?

Yes, exploitation of the cisco-sa-20200318-vmanage-xss vulnerability requires that the attacker is an authenticated user of the Cisco vManage web interface.