CVE-2019-16004
Summary
| CVE | CVE-2019-16004 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-23 01:15:00 UTC |
| Updated | 2020-09-28 18:59:00 UTC |
| Description | A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to missing authentication on some of the API calls. An attacker could exploit this vulnerability by sending a request to one of the affected calls. A successful exploit could allow the attacker to interact with some parts of the API. |
Risk And Classification
Problem Types: CWE-306
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Vision Dynamic Signage Director | All | All | All | All |
| Application | Cisco | Vision Dynamic Signage Director | 6.2.0 | - | All | All |
| Application | Cisco | Vision Dynamic Signage Director | 6.2.0 | sp1 | All | All |
| Application | Cisco | Vision Dynamic Signage Director | All | All | All | All |
| Application | Cisco | Vision Dynamic Signage Director | 6.2.0 | - | All | All |
| Application | Cisco | Vision Dynamic Signage Director | 6.2.0 | sp1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Vision Dynamic Signage Director Authentication Bypass Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.