CVE-2020-26063

Summary

CVE-2020-26063 is a vulnerability affecting the API endpoints of Cisco Integrated Management Controller. This issue allows authenticated, remote attackers to bypass authorization checks, enabling them to take unauthorized actions on vulnerable systems. The flaw arises due to inadequate authorization checks on API endpoints. An attacker can exploit this vulnerability by crafting malicious requests to an API endpoint. Successful exploitation may result in the downloading of files or modification of limited configuration options on the affected system. Presently, there are no available workarounds to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.