Access Control Vulnerability in Cisco Secure Workload

CVE-2023-20136

What is CVE-2023-20136?

A flaw in the OpenAPI of Cisco Secure Workload permits an authenticated, remote attacker with read-only privileges to perform actions meant for Administrator users. This vulnerability arises from inadequate role-based access control for specific OpenAPI functions. An attacker can exploit this by sending a specially crafted function call with valid credentials, thereby enabling unauthorized operations such as the creation and deletion of user labels, which should be strictly controlled.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References