CVE-2022-20921

ÉLEVÉE 8.8CVE-2022-20921 · Published 25/08/2022 · updated 17/06/2026

En bref

CVE-2022-20921 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant aci multi-site orchestrator (cisco).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.2%, plus élevée que 68.3% des vulnérabilités.
Correctif : mettre à jour vers 3.1\(1n\) ou plus récent.

Package	Affected versions	Patched versions
aci multi-site orchestrator cisco	`< 3.1\(1n\)`	`3.1\(1n\)`

Description

A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to improper authorization on specific APIs. An attacker could exploit this vulnerability by sending crafted HTTP requests. A successful exploit could allow an attacker who is authenticated with non-Administrator privileges to elevate to Administrator privileges on an affected device.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZs · Vendor Advisory

Autres vulnérabilités de aci multi-site orchestrator

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free