Cisco SD-WAN vManage Directory Traversal Vulnerability (CVE-2020-26073) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco SD-WAN vManage Software Directory Traversal Vulnerability - Vulnerability ID: cisco-sa-vman-traversal-hQh24tmk - CVE Number: CVE-2020-26073 - CVSS Score: 7.5 - Severity: High 2. Vulnerability Impact: - Affected Product: Cisco SD-WAN vManage Software - Affected Versions: 18.3 and later versions 3. Exploitation: - Exploitation Method: By sending malicious requests to the API of the affected application - Impact: Allows unauthorized remote attackers to access sensitive information, including credentials or user tokens 4. Remediation: - Published Fix: Cisco has released software updates to address this vulnerability - Workarounds: No workarounds are available 5. Affected Products List: - Confirmed Affected Products: Cisco SD-WAN vManage Software - Confirmed Unaffected Products: IOS XE SD-WAN Software, SD-WAN vBond Orchestrator Software, SD-WAN vEdge Routers, SD-WAN vSmart Controller Software 6. Affected Users: - Affected Users: Users of affected versions of Cisco SD-WAN vManage Software 7. Security Policy: - Security Policy Link: Cisco Security Vulnerability Policy 8. User Feedback: - User Rating: Users can rate the vulnerability; current average rating is 4 stars 9. Related Links: - Related Link: Cisco Security Advisory 10. Legal Disclaimer: - Legal Disclaimer: The document is provided "as is" without any warranties or guarantees, including but not limited to merchantability or fitness for a particular purpose. Users assume all risks associated with using the document or materials linked to it. This information helps users understand the details of the vulnerability, affected products and users, remediation steps, and related security policies.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco SD-WAN vManage Directory Traversal Vulnerability (CVE-2020-26073) Advisory