5.3
Medium
CVE-2021-1486 A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user…
Description
A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A successful exploit could allow the attacker to compare the HTTP responses that are returned by the affected system to determine which accounts are valid user accounts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN vManage | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco SD-WAN vManage
The 61 CVEs of Cisco SD-WAN vManage →
CVE-2023-20261
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve…
6.5
Medium
CVE-2023-20179
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage,…
4.3
Medium
CVE-2023-20252
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could…
9.8
Critical
CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
5.3
Medium