8.8 Élevée

CVE-2022-20921 A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated,…

Description

A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to improper authorization on specific APIs. An attacker could exploit this vulnerability by sending crafted HTTP requests. A successful exploit could allow an attacker who is authenticated with non-Administrator privileges to elevate to Administrator privileges on an affected device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco ACI Multi-Site Orchestrator Software	Versions non publiées

Références

20220824 Cisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability tools.cisco.com

Chronologie

Publiée 25 août 2022
Dernière modification 1 novembre 2024

Les 2 CVE de Cisco ACI Multi-Site Orchestrator Software →

CVE-2021-1388 A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services… 10.0 Critique

Suivre cette CVE