CVE-2023-20238

Summary

CVE-2023-20238 is a vulnerability affecting the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform. This issue allows unauthenticated, remote attackers to forge SSO tokens and gain access to affected systems. The vulnerability arises due to a flawed validation method for SSO tokens. An attacker could exploit this by authenticating with forged credentials, potentially resulting in toll fraud or command execution at the forged account's privilege level. If the forged account is an Administrator account, the attacker may gain access to confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, an attacker requires a valid user ID associated with an affected Cisco BroadWorks system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.