10
CVSSv2

CVE-2019-1867

Published: 10/05/2019 Updated: 09/10/2019
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 10 | Impact Score: 6 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote malicious user to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted request to the REST API. A successful exploit could allow the malicious user to execute arbitrary actions through the REST API with administrative privileges on an affected system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco elastic services controller

Vendor Advisories

A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API The vulnerability is due to improper validation of API requests An attacker could exploit this vulnerability by sending a crafted request to the REST API A successful exploit could al ...