Access Control Vulnerability in Cisco Secure Workload

CVE-2023-20136

Summary

A flaw in the OpenAPI of Cisco Secure Workload permits an authenticated, remote attacker with read-only privileges to perform actions meant for Administrator users. This vulnerability arises from inadequate role-based access control for specific OpenAPI functions. An attacker can exploit this by sending a specially crafted function call with valid credentials, thereby enabling unauthorized operations such as the creation and deletion of user labels, which should be strictly controlled.

References