CVE-2021-1482
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 20
Summary
CVE-2021-1482 is a vulnerability in Cisco SD-WAN vManage Software that allows authenticated, remote attackers to bypass authorization checks and gain unauthorized access to sensitive information. The issue arises due to insufficient authorization checks, enabling attackers to craft HTTP requests and exploit the vulnerability. Successful exploitation could result in the attacker accessing sensitive data on the affected system. Cisco has released software updates to mitigate this vulnerability, and no workarounds have been identified.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Catalyst SD-WAN Manager
Affected Vendors
- Cisco Systems Inc