CVE-2021-1589

 

Published at: - 23-09-2021 05:15

Last modified: - 21-10-2022 09:33

Total changes: - 4

Description

A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exists because access to API endpoints is not properly restricted. An attacker could exploit this vulnerability by sending a request to an API endpoint. A successful exploit could allow the attacker to gain unauthorized access to administrative credentials that could be used in further attacks.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• 20210922 Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability-Patch, Vendor Advisory

 

Keywords

NVD

 

CVE-2021-1589

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures