Cisco SD-WAN vManage Software Vulnerability Could Lead to Sensitive Information Access

CVE-2021-1482

Summary

A vulnerabilities exists in the web-based management interface of Cisco SD-WAN vManage Software, which can be exploited by an authenticated remote attacker. This vulnerability arises from inadequate authorization checks that allow attackers to send specially crafted HTTP requests to the management interface. Successful exploitation enables attackers to bypass necessary authorization and obtain sensitive information from the system. To mitigate this issue, Cisco has issued software updates, with no alternative workarounds available for affected systems.

References