Vulnslist

find the latest Cisco vulnerabilities

Cisco DNA Center Cross Origin Resource Sharing Vulnerability

cisco-sa-20180418-dna1 · Medium · Published · Updated

A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauthenticated, remote attacker to communicate with the Kong API server without restriction. The vulnerability is due to an overly permissive Cross Origin Resource Sharing (CORS) policy. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. An exploit could allow the attacker to communicate with the API and exfiltrate sensitive information. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-dna1

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2018-0269
Cisco Bug IDsCSCvh99208
CVSS ScoreBase 5.4
Base 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Digital Network Architecture Center (DNA Center)

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2018-0269 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2018-0269 Cisco OpenVuln
Cisco Digital Network Architecture Center (DNA Center) CVE-2018-0269 Cisco OpenVuln