A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.
History

Fri, 01 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2022-10-10T20:43:14.821035Z

Updated: 2024-11-01T18:49:48.769Z

Reserved: 2021-11-02T00:00:00

Link: CVE-2022-20830

cve-icon Vulnrichment

Updated: 2024-08-03T02:24:49.961Z

cve-icon NVD

Status : Modified

Published: 2022-10-10T21:15:10.063

Modified: 2024-11-21T06:43:38.623

Link: CVE-2022-20830

cve-icon Redhat

No data.