6.3
Medium
CVE-2020-3539 A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an…
Description
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. The vulnerability is due to a failure to limit access to resources that are intended for users with Administrator privileges. An attacker could exploit this vulnerability by convincing a user to click a malicious URL. A successful exploit could allow a low-privileged attacker to list, view, create, edit, and delete templates in the same manner as a user with Administrator privileges.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Data Center Network Manager | Versions not published |
References
- cisco-sa-dcnm-authbypass-YVJzqgk2 sec.cloudapps.cisco.com
- sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Data Center Network Manager
The 74 CVEs of Cisco Data Center Network Manager →
CVE-2025-20347
A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller (NDFC)…
5.4
Medium
CVE-2025-20163
A vulnerability in the SSH implementation of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an…
8.7
High
CVE-2020-3538
A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow…
4.6
Medium
CVE-2024-20536
A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller…
8.8
High