105283vdb entry
http://www.securityfocus.com/bid/105283 CVE-2018-0435
CRITICAL
Cisco Umbrella API Unauthorized Access Vulnerability
Record summary
CVE-2018-0435 has a selected CVSS score of 9.1 (critical).
Description
A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this vulnerability to view and potentially modify data for their organization or other organizations. A successful exploit could allow the attacker to read or modify data across multiple organizations.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 25, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Cisco UmbrellaBrowse Cisco / Cisco Umbrella | CVE List | Version range not supplied | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-0435 20180905 Cisco Umbrella API Unauthorized Access VulnerabilityVendor advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-api