CVE-2018-0435: fallo en Cisco Umbrella
Cisco Umbrella API Unauthorized Access Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 1.1%
A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this vulnerability to view and potentially modify data for their organization or other organizations. A successful exploit could allow the attacker to read or modify data across multiple organizations.
Productos afectados
Cisco · Cisco UmbrellaCVEs relacionadas — Cisco Umbrella
En el mismo producto, de las más peligrosas a las menos.
CVE-2018-0437—Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation VulnerabilityEPSS 1.5%CVE-2019-1807HIGHCisco Umbrella Dashboard Session Management VulnerabilityEPSS 1.5%CVE-2018-0438—Cisco Umbrella Enterprise Roaming Client Privilege Escalation VulnerabilityEPSS 1.4%CVE-2019-1792MEDIUMCisco Umbrella Cross-Site Scripting VulnerabilityEPSS 1.2%CVE-2020-3246MEDIUMCisco Umbrella Carriage Return Line Feed Injection VulnerabilityEPSS 0.9%CVE-2020-3337MEDIUMCisco Umbrella Open Redirect VulnerabilityEPSS 0.8%