CVE-2022-20939

CVSS V2 None CVSS V3 None

Description

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to inadequate protection of sensitive user information. An attacker could exploit this vulnerability by accessing certain logs on an affected system. A successful exploit could allow the attacker to use the obtained information to elevate privileges to System Admin.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Overview

CVE ID
CVE-2022-20939

Assigner
cisco

Vulnerability Status
PUBLISHED

Published Version
2024-11-15T15:25:32.612Z

Last Modified Date
2024-11-15T15:35:52.949Z

Weakness Enumerations

CWE	URL
CWE-922	http://cwe.mitre.org/data/definitions/922.html

References

Reference URL	Reference Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-priv-esc-SEjz69dv
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-thinrcpt-xss-gSj4CecU

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-20939
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20939

History

Created	Old Value	New Value	Data Type	Notes
2024-11-16 12:12:06				Added to TrackCVE