PT-2019-2050 · Cisco · Cisco Umbrella Dashboard

Muhammad Shahzaib · Published 2019-05-01 · Updated 2019-10-09 · CVE-2019-1807

Positive Technologies (AI Summary)

CVSS v2.0

8.7

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Dashboard (affected versions not specified)

Description A vulnerability in the session management functionality of the Cisco Umbrella Dashboard's web UI could allow an authenticated, remote attacker to access the Dashboard via an active user session. This issue arises because the application fails to invalidate an existing session when a user's credentials are changed via another authenticated session. An attacker could exploit this by using a separate, authenticated, active session to connect to the application through the web UI, potentially maintaining access to the dashboard via an authenticated user's browser session.

Recommendations No specific version-based recommendations are provided, as the affected versions are not specified. However, Cisco has addressed this vulnerability in the Cisco Umbrella Dashboard, and no user action is required. As a general mitigation measure, consider restricting access to the Dashboard and ensuring that all sessions are properly invalidated when a user's credentials are changed.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

BDU:2019-01795

CVE-2019-1807

Affected Products

Cisco Umbrella Dashboard

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-1807 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-udb-sm · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01795 · Security Note