PT-2022-6667 · Cisco · Cisco Secure Workload

Published 2022-10-27 · Updated 2024-01-25 · CVE-2023-20136

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Workload (affected versions not specified)

Description A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials. This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

CWE-648

Related Identifiers

BDU:2023-03208

CVE-2023-20136

Affected Products

Cisco Secure Workload

References · 6

• https://bdu.fstec.ru/vul/2023-03208 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20136 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-auth-openapi-kTndjdNX · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20136 · Security Note
• https://vuldb.com/ru/?id.231078 · Note
• https://t.me/cibsecurity/65610 · Telegram Post