Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2020-3112 | Cisco Data Center Network Manager REST API Endpoint access control (cisco-sa-20200219-dcnm-priv-es)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability, which was classified as critical, has been found in Cisco Data Center Network Manager. Affected by this issue is some unknown functionality of the component REST API Endpoint. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2020-3112. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Cisco Data Center Network Manager REST API Endpoint improper authorization


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint incomplete blacklist


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint improper authorization


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint improper authorization


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint improper authorization


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint sql injection


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Endpoint sql injection


📈 49.34 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager REST API Session Token hard-coded credentials


📈 40.68 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager prior 11.4(1) REST API input validation


📈 40.68 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-15984 | Cisco Data Center Network Manager REST/SOAP sql injection (cisco-sa-20200102-dcnm-sql-inj)


📈 39.91 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-15978 | Cisco Data Center Network Manager REST/SOAP os command injection (cisco-sa-20200102-dcnm-comm-in)


📈 39.91 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20325 | Cisco Unified Intelligence Center up to 12.6 Live Data Server access control (cisco-sa-cuic-access-control-jJsZQMjj)


📈 39.28 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-39118 | Atlassian JIRA Server/Data Center up to 8.18.x Endpoint /rest/api/1.0/render information disclosure (JRASERVER-72736)


📈 36 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1598 | WPQA Builder Plugin up to 5.3 on WordPress REST API Endpoint access control


📈 35.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-45438 | Apache Superset up to 1.5.2/2.0.0 REST API Get Endpoint access control


📈 35.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-36646 | ProLion CryptoSpike 3.0.15P2 REST API Endpoint access control


📈 35.48 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Prime Data Center Network Manager 10.1(1)/10.1(2) Role-Based Access Control erweiterte Rechte


📈 34.93 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Prime Data Center Network Manager 10.1(1)/10.1(2) Role-Based Access Control privilege escalation


📈 34.93 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Data Center Network Manager prior 11.4(1) access control


📈 34.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20417 | Cisco Identity Services Engine Software up to 3.3.0 REST API sql injection (cisco-sa-ise-rest-5bPKrNtZ)


📈 34.54 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Security Updates – Critical RCE vulnerability let Hackers Gain Control Over Cisco Data Center Network Manager Remotely


📈 34.08 Punkte
🕵️ Hacking

🕵️ CVE-2024-20477 | Cisco Nexus Dashboard Fabric Controller up to 12.2.1 REST API Endpoint authorization (cisco-sa-ndhs-uaapi-Jh4V6zpN)


📈 33.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20444 | Cisco Nexus Dashboard Fabric Controller up to 12.2.1 REST API Endpoint argument injection (cisco-sa-ndfc-raci-T46k3jnN)


📈 33.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20441 | Cisco Nexus Dashboard Fabric Controller up to 12.2.1 REST API Endpoint improper authorization (cisco-sa-ndhs-uaapi-Jh4V6zpN)


📈 33.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20438 | Cisco Nexus Dashboard Fabric Controller up to 12.2.1 REST API Endpoint protection mechanism (cisco-sa-ndhs-uaapi-Jh4V6zpN)


📈 33.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20442 | Cisco Nexus Dashboard up to 3.1(1l) REST API Endpoint authorization (cisco-sa-ndhs-uaapi-Jh4V6zpN)


📈 33.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20283 | Cisco Nexus Dashboard up to 3.0 API Endpoint access control (cisco-sa-ndidv-LmXdvAf2)


📈 33.21 Punkte
🕵️ Sicherheitslücken

🕵️ TIBCO FTP Community Edition up to 6.5.0 on Windows Server/C API/Golang API/Java API/.Net API access control


📈 32.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20223 | Cisco DNA Center API access control (cisco-sa-dnac-ins-acc-con-nHAVDRBZ)


📈 31.83 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-0349 | IBM Business Process Manager up to 8.5.6.2/8.5.7 REST API access control (ID 1036185)


📈 31.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-45323 | Fortinet FortiEDR Manager up to 6.0.1/6.2.1 REST API access control (FG-IR-24-371)


📈 31.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0965 | pluginsandsnippets Simple Page Access Restriction Plugin up to 1.0.21 on WordPress REST API access control (ID 3030099)


📈 31.52 Punkte
🕵️ Sicherheitslücken

🕵️ wp-google-maps Plugin up to 7.11.17 on WordPress REST API class.rest-api.php SELECT Statement sql injection


📈 31.44 Punkte
🕵️ Sicherheitslücken

🕵️ WP Live Chat Support up to 8.0.32 on WordPress REST API REST API Call privilege escalation


📈 31.44 Punkte
🕵️ Sicherheitslücken

📰 Network Access Control ist nicht gleich Network Access Control (NAC)


📈 31.35 Punkte
📰 IT Security Nachrichten

matomo
•