QID 316952

A vulnerability in the web-based management interface of Cisco SD-WAN vManage
Software could allow an authenticated, remote attacker to
bypass authorization checking and gain access to sensitive information on an affected system.

Affected Products
Cisco SD-WAN vManage Software releases :
Prior to 20.1.2.15
From 20.2.0 Prior to 20.3.3.5
From 20.4.0 Prior to 20.4.1.67
From 20.5.0 Prior to 20.5.0.48

QID detection logic:
The QID checks for Cisco SD WAN version retrieved via Unix Auth using "show system status" command.

A successful exploit could allow the attacker to bypass authorization checking and gain access to sensitive information on the affected system.