cisco-sa-sdwan-vmanage-infdis-LggOP9sE: Cisco SD-WAN vManage Software Information Disclosure Vulnerability
First published: Wed Jul 21 2021(Updated: )
A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficiently controlled. An attacker could exploit this vulnerability by gaining unauthorized access to sensitive information on an affected system. A successful exploit could allow the attacker to create forged authentication requests and gain unauthorized access to the web UI of an affected system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanage-infdis-LggOP9sE
Credit: by James Spadaro the Cisco Advanced Security Initiatives Group
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-vmanage-infdis-LggOP9sE?
The severity of the cisco-sa-sdwan-vmanage-infdis-LggOP9sE vulnerability is significant due to its potential impact on sensitive information access.
How do I fix cisco-sa-sdwan-vmanage-infdis-LggOP9sE?
To fix the cisco-sa-sdwan-vmanage-infdis-LggOP9sE vulnerability, ensure that you apply the recommended software updates provided by Cisco.
Who is affected by cisco-sa-sdwan-vmanage-infdis-LggOP9sE?
The cisco-sa-sdwan-vmanage-infdis-LggOP9sE vulnerability affects users of Cisco SD-WAN vManage Software.
What could an attacker achieve with cisco-sa-sdwan-vmanage-infdis-LggOP9sE?
An attacker exploiting the cisco-sa-sdwan-vmanage-infdis-LggOP9sE vulnerability could read arbitrary files on the affected system's file system.
What type of attacker is involved in cisco-sa-sdwan-vmanage-infdis-LggOP9sE?
The cisco-sa-sdwan-vmanage-infdis-LggOP9sE vulnerability involves an authenticated, local attacker.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/author
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage