Server-Side Request Forgery Vulnerability in Cisco Finesse Management Interface
CVE-2018-0398

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Finesse Unknown
Vendor
CVE Published:
18 July 2018

What is CVE-2018-0398?

The web-based management interface of Cisco Finesse has multiple vulnerabilities that can be exploited by an unauthenticated remote attacker. These weaknesses may allow the attacker to perform server-side request forgery (SSRF) attacks, potentially leading to unauthorized access and manipulation of internal resources. This vulnerability highlights the importance of securing management interfaces to prevent remote exploitation.

Affected Version(s)

Cisco Finesse unknown Cisco Finesse unknown

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/104886
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-0398 : Server-Side Request Forgery Vulnerability in Cisco Finesse Management Interface