| Package | Affected versions | Patched versions |
|---|---|---|
| catalyst sd-wan manager | = 20.12.7≥ 20.10, < 20.12.5.4≥ 20.12.6, < 20.12.6.2≥ 20.13, < 20.15.4.4≥ 20.15.5, < 20.15.5.2≥ 20.16, < 20.18.2.2≥ 26.1, < 26.1.1.1< 20.9.9.1 | 20.12.5.420.12.6.220.15.4.420.15.5.220.18.2.226.1.1.120.9.9.1 |
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free