Aller au contenu
en Se connecter
9.1 Critique

CVE-2026-20328 A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager…

Description

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during the password reset process. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to reset the password of an arbitrary account, including high-privileged administrative user accounts, possibly allowing the attacker to gain unauthorized access to the application as any user.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco License On-Prem 10-202606 Pas de correctif indiqué
Cisco License On-Prem 9 9-202201 → 9-202601 Pas de correctif indiqué
Cisco License On-Prem 8 8-202004 → 8-202404 Pas de correctif indiqué
Cisco License On-Prem 7-202001 Pas de correctif indiqué
Cisco License On-Prem 6.3.0 Pas de correctif indiqué
Cisco License On-Prem 1.4 Pas de correctif indiqué
Cisco License On-Prem 1.3 Pas de correctif indiqué
Cisco License On-Prem 1.2 Pas de correctif indiqué
Cisco License On-Prem 1.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco License On-Prem

Les 8 CVE de Cisco License On-Prem →
CVE-2026-76484 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco… 8.8 Élevée CVE-2026-76483 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco… 9.1 Critique CVE-2026-76482 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco… 10.0 Critique CVE-2026-76480 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco… 9.8 Critique
Suivre cette CVE