CVE-2018-15394— Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system configuration. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. An exploit could allow the attacker to gain unauthenticated access, resulting in elevated privileges in the SMC.

N/A

访问控制不恰当

Cisco Stealthwatch Enterprise 访问控制错误漏洞

Cisco Stealthwatch Enterprise是美国思科（Cisco）公司的一套企业网络安全防护解决方案。该产品具有安全事件分析、网络分段管理和数据保护等功能。 Cisco Stealthwatch Enterprise 6.10.2及之前版本中的Stealthwatch管理控制台（SMC）存在访问控制错误漏洞，该漏洞源于不安全的系统配置。远程攻击者可通过发送特制的HTTP请求利用该漏洞绕过身份验证，进而在受影响的系统上以管理权限执行任意操作。

N/A

N/A