CVE-2023-20252

Summary

CVE	CVE-2023-20252
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-09-27 18:15:00 UTC
Updated	2024-01-25 17:15:00 UTC
Description	A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to improper authentication checks for SAML APIs. An attacker could exploit this vulnerability by sending requests directly to the SAML API. A successful exploit could allow the attacker to generate an authorization token sufficient to gain access to the application.

Risk And Classification

Problem Types: CWE-287

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Cisco	Catalyst Sd-wan Manager	20.11.1.2	All	All	All
Application	Cisco	Catalyst Sd-wan Manager	20.9.3.2	All	All	All
Application	Cisco	Sd-wan Vmanage	20.11.1.2	All	All	All
Application	Cisco	Sd-wan Vmanage	20.9.3.2	All	All	All

References

Reference	Source	Link	Tags
Cisco Catalyst SD-WAN Manager Vulnerabilities	MISC	sec.cloudapps.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

317359 Cisco SD-WAN vManage Unauthorized access Vulnerabilities (cisco-sa-sdwan-vman-sc-LRLfu2z)