PT-2018-8826 · Cisco · Cisco Umbrella

Publicado 2018-10-05 · Atualizado 2019-10-09 · CVE-2018-0435

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Umbrella (affected versions not specified)

Description A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The issue is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this to view and potentially modify data for their organization or other organizations, allowing them to read or modify data across multiple organizations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-0435

Produtos afetados

Cisco Umbrella

Referências · 3

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-api · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0435 · Nota de Segurança
• http://securityfocus.com/bid/105283 · Nota