cnvd - cnvd-2023-80115

cnvd-2023-80115

Vulnerability from cnvd

Title: Cisco Catalyst SD-WAN Manager未授权访问漏洞

Description:

Cisco vManage是一个高度可定制的控制面板，可简化并自动执行Cisco SD-WAN部署、配置、管理与运营。

Cisco Catalyst SD-WAN Manager在20.9.3.2和20.11.1.2版本中存在未授权访问漏洞。该漏洞由于未正确检查SAML API所致。攻击者可利用该漏洞生成足以访问应用程序的授权令牌。

Severity: 高

Patch Name: Cisco Catalyst SD-WAN Manager未授权访问漏洞的补丁

Patch Description:

Cisco vManage是一个高度可定制的控制面板，可简化并自动执行Cisco SD-WAN部署、配置、管理与运营。

Cisco Catalyst SD-WAN Manager在20.9.3.2和20.11.1.2版本中存在未授权访问漏洞。该漏洞由于未正确检查SAML API所致。攻击者可利用该漏洞生成足以访问应用程序的授权令牌。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z

Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20252

Impacted products

Name
['Cisco Catalyst SD-WAN Manager 20.9.3.2', 'Cisco Catalyst SD-WAN Manager 20.11.1.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-20252",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-20252"
    }
  },
  "description": "Cisco vManage\u662f\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u5b9a\u5236\u7684\u63a7\u5236\u9762\u677f\uff0c\u53ef\u7b80\u5316\u5e76\u81ea\u52a8\u6267\u884cCisco SD-WAN\u90e8\u7f72\u3001\u914d\u7f6e\u3001\u7ba1\u7406\u4e0e\u8fd0\u8425\u3002\n\nCisco Catalyst SD-WAN Manager\u572820.9.3.2\u548c20.11.1.2\u7248\u672c\u4e2d\u5b58\u5728\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u7531\u4e8e\u672a\u6b63\u786e\u68c0\u67e5SAML API\u6240\u81f4\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u751f\u6210\u8db3\u4ee5\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u7684\u6388\u6743\u4ee4\u724c\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0:\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-80115",
  "openTime": "2023-10-24",
  "patchDescription": "Cisco vManage\u662f\u4e00\u4e2a\u9ad8\u5ea6\u53ef\u5b9a\u5236\u7684\u63a7\u5236\u9762\u677f\uff0c\u53ef\u7b80\u5316\u5e76\u81ea\u52a8\u6267\u884cCisco SD-WAN\u90e8\u7f72\u3001\u914d\u7f6e\u3001\u7ba1\u7406\u4e0e\u8fd0\u8425\u3002\r\n\r\nCisco Catalyst SD-WAN Manager\u572820.9.3.2\u548c20.11.1.2\u7248\u672c\u4e2d\u5b58\u5728\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u7531\u4e8e\u672a\u6b63\u786e\u68c0\u67e5SAML API\u6240\u81f4\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u751f\u6210\u8db3\u4ee5\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u7684\u6388\u6743\u4ee4\u724c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Catalyst SD-WAN Manager\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Catalyst SD-WAN Manager 20.9.3.2",
      "Cisco Catalyst SD-WAN Manager 20.11.1.2"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2023-20252",
  "serverity": "\u9ad8",
  "submitTime": "2023-09-28",
  "title": "Cisco Catalyst SD-WAN Manager\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e"
}

CVE-2023-20252 (GCVE-0-2023-20252)

Vulnerability from cvelistv5

Published

2023-09-27 17:17

Modified

2024-10-23 19:41

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-862 - Missing Authorization

Summary

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to improper authentication checks for SAML APIs. An attacker could exploit this vulnerability by sending requests directly to the SAML API. A successful exploit could allow the attacker to generate an authorization token sufficient to gain access to the application.

References

▼	URL	Tags
	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z

Impacted products

	Vendor	Product	Version
	Cisco	Cisco SD-WAN vManage	Version: 20.9.3.2 Version: 20.11.1.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:05:36.846Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-sdwan-vman-sc-LRLfu2z",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-20252",
                "options": [
                  {
                    "Exploitation": "None"
                  },
                  {
                    "Automatable": "Yes"
                  },
                  {
                    "Technical Impact": "Total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:38:21.171488Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-23T19:41:21.125Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco SD-WAN vManage",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "20.9.3.2"
            },
            {
              "status": "affected",
              "version": "20.11.1.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user.\r\n\r This vulnerability is due to improper authentication checks for SAML APIs. An attacker could exploit this vulnerability by sending requests directly to the SAML API. A successful exploit could allow the attacker to generate an authorization token sufficient to gain access to the application."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing Authorization",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-25T16:58:32.419Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-sdwan-vman-sc-LRLfu2z",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sdwan-vman-sc-LRLfu2z",
        "defects": [
          "CSCwh03202"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2023-20252",
    "datePublished": "2023-09-27T17:17:38.087Z",
    "dateReserved": "2022-10-27T18:47:50.372Z",
    "dateUpdated": "2024-10-23T19:41:21.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted