CRITICAL✓ PATCH🇬🇧 English

CVE-2018-0435

CVSS 9.1v3.0pub. 2018-10-05upd. 2024-11-21

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this vulnerability to view and potentially modify data for their organization or other organizations. A successful exploit could allow the attacker to read or modify data across multiple organizations.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

  • Cisco Umbrella

    APP
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2019-1807HIGH7.6ten sam produkt

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could a...

CVE-2022-20969MEDIUM4.8ten sam produkt

A vulnerability in multiple management dashboard pages of Cisco Umbrella could allow an authenticated, remote ...

CVE-2021-40126MEDIUM4.3ten sam produkt

A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to ...

CVE-2021-1474MEDIUM6.5ten sam produkt

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella...

CVE-2021-1475MEDIUM6.5ten sam produkt

Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella...