A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this vulnerability by logging in to the vManage Web UI and sending crafted HTTP requests to vManage. A successful exploit could allow attackers to gain elevated privileges and make changes to the configuration that they would not normally be authorized to make.
History

Wed, 20 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-06-20T02:45:15.427788Z

Updated: 2024-11-20T17:17:34.338Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1626

cve-icon Vulnrichment

Updated: 2024-08-04T18:20:28.349Z

cve-icon NVD

Status : Modified

Published: 2019-06-20T03:15:11.433

Modified: 2024-11-21T04:36:57.660

Link: CVE-2019-1626

cve-icon Redhat

No data.