cisco-sa-sdwan-vmanageinfdis-LKrFpbv: Cisco SD-WAN vManage Information Disclosure Vulnerability
First published: Wed May 05 2021(Updated: )
A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to allow the attacker to view sensitive information on the affected system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanageinfdis-LKrFpbv
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-vmanageinfdis-LKrFpbv?
The severity of the vulnerability cisco-sa-sdwan-vmanageinfdis-LKrFpbv is classified as high.
How do I fix cisco-sa-sdwan-vmanageinfdis-LKrFpbv?
To fix cisco-sa-sdwan-vmanageinfdis-LKrFpbv, update Cisco SD-WAN vManage Software to the latest patched version.
What type of information can be exposed due to cisco-sa-sdwan-vmanageinfdis-LKrFpbv?
The vulnerability cisco-sa-sdwan-vmanageinfdis-LKrFpbv may expose sensitive information from the affected system.
Who can exploit the cisco-sa-sdwan-vmanageinfdis-LKrFpbv vulnerability?
An unauthenticated, remote attacker can potentially exploit the vulnerability cisco-sa-sdwan-vmanageinfdis-LKrFpbv.
In what deployment mode does cisco-sa-sdwan-vmanageinfdis-LKrFpbv affect Cisco SD-WAN vManage Software?
The vulnerability cisco-sa-sdwan-vmanageinfdis-LKrFpbv affects Cisco SD-WAN vManage Software when it is running in cluster mode.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/severity
- agent/title
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco sd-wan vmanage