| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| catalyst sd-wan manager | = 20.12.7≥ 20.10, < 20.12.5.4≥ 20.12.6, < 20.12.6.2≥ 20.13, < 20.15.4.4≥ 20.15.5, < 20.15.5.2≥ 20.16, < 20.18.2.2≥ 26.1, < 26.1.1.1< 20.9.9.1 | 20.12.5.420.12.6.220.15.4.420.15.5.220.18.2.226.1.1.120.9.9.1 |
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions on an affected system. This vulnerability exists because of a failure to redact sensitive information within device configurations and templates. An attacker could exploit this vulnerability by elevating their read-only permissions to those of a high-privileged user. A successful exploit could allow the attacker to access or modify configuration settings within Cisco Catalyst SD-WAN Manager as a high-privileged user.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí