5.3
Moyenne
CVE-2018-0382 A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless…
Description
A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected software does not properly clear previously assigned session identifiers for a user session when a user authenticates to the web-based interface. An attacker could exploit this vulnerability by using an existing session identifier to connect to the software through the web-based interface. Successful exploitation could allow the attacker to hijack an authenticated user's browser session on the system. Versions 8.1 and 8.5 are affected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Wireless LAN Controller (WLC) | Versions non publiées |
Références
- 20190417 Cisco Wireless LAN Controller Software Session Hijacking Vulnerability tools.cisco.com
- 108005 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Wireless LAN Controller (WLC)
Les 25 CVE de Cisco Wireless LAN Controller (WLC) →
CVE-2025-20191
A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco…
7.4
Élevée
CVE-2023-20251
A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an…
6.1
Moyenne
CVE-2022-20769
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow…
7.4
Élevée
CVE-2022-20695
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an…
10.0
Critique