CVE-2020-26063
Cisco Integrated Management Controller Software Authorization Bypass Vulnerability
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization.
The vulnerability is due to improper authorization checks on API endpoints. An attacker could exploit this vulnerability by sending malicious requests to an API endpoint. An exploit could allow the attacker to download files from or modify limited configuration options on the affected system.There are no workarounds that address this vulnerability.
Una vulnerabilidad en los puntos finales de API de Cisco Integrated Management Controller podría permitir que un atacante remoto autenticado omita la autorización y realice acciones en un sistema vulnerable sin autorización. La vulnerabilidad se debe a comprobaciones de autorización incorrectas en los endpoints de API. Un atacante podría aprovechar esta vulnerabilidad enviando solicitudes maliciosas a un endpoint de API. Una vulnerabilidad podría permitir al atacante descargar archivos o modificar opciones de configuración limitadas en el sistema afectado. No existen workarounds que aborden esta vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-09-24 CVE Reserved
- 2024-11-18 CVE Published
- 2024-11-18 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-269: Improper Privilege Management
CAPEC
References (4)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.0 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 3.2 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Unified Computing System (Managed) Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" | 4.1 Search vendor "Cisco" for product "Cisco Unified Computing System (Managed)" and version "4.1" | en |
Affected
| ||||||