cisco-sa-sd-wan-credentials-ydYfskzZ: Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability
First published: Wed Sep 22 2021(Updated: )
A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exists because access to API endpoints is not properly restricted. An attacker could exploit this vulnerability by sending a request to an API endpoint. A successful exploit could allow the attacker to gain unauthorized access to administrative credentials that could be used in further attacks. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-credentials-ydYfskzZ
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage | =20.6<20.6.1=20.5<20.5.2=20.4<20.4.2>=18.4 and earlier=19.2<=20.3<20.3.4 | 20.6.1 20.5.2 20.4.2 20.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sd-wan-credentials-ydYfskzZ?
The severity of cisco-sa-sd-wan-credentials-ydYfskzZ is high due to the potential unauthorized access to user credentials.
How do I fix cisco-sa-sd-wan-credentials-ydYfskzZ?
To fix cisco-sa-sd-wan-credentials-ydYfskzZ, upgrade to a fixed version of Cisco SD-WAN vManage Software.
What causes the vulnerability cisco-sa-sd-wan-credentials-ydYfskzZ?
cisco-sa-sd-wan-credentials-ydYfskzZ is caused by insufficient restrictions on access to API endpoints.
Who is affected by cisco-sa-sd-wan-credentials-ydYfskzZ?
cisco-sa-sd-wan-credentials-ydYfskzZ affects users of Cisco SD-WAN vManage Software versions 20.3.4 and earlier.
What type of attacker can exploit cisco-sa-sd-wan-credentials-ydYfskzZ?
An authenticated, remote attacker can exploit cisco-sa-sd-wan-credentials-ydYfskzZ to gain unauthorized access.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/title
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage
- version/cisco sd-wan vmanage/20.6
- version/cisco sd-wan vmanage/20.5
- version/cisco sd-wan vmanage/20.4
- version/cisco sd-wan vmanage/18.4 and earlier
- version/cisco sd-wan vmanage/19.2
- version/cisco sd-wan vmanage/20.3