CVE-2019-16002mediumCWE-352

CVE-2019-16002: fallo de gravedad media en Cisco vManage Software

Cisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco vManage

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.7%
A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instance of vManage. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Productos afectados
Cisco · Cisco vManage Software
CVEs relacionadas — Cisco vManage Software

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-16012MEDIUMCisco SD-WAN Solution vManage SQL Injection VulnerabilityEPSS 54.2%CVE-2019-16010MEDIUMCisco SD-WAN Solution vManage Stored Cross-Site Scripting VulnerabilityEPSS 0.8%