CVE-2022-20921

Name of the Vulnerable Software and Affected Versions Cisco ACI Multi-Site Orchestrator (MSO) (affected versions not specified)

Description The issue is related to improper authorization on specific APIs in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO). This allows an authenticated, remote attacker to elevate privileges on an affected device by sending crafted HTTP requests. A successful exploit could allow an attacker who is authenticated with non-Administrator privileges to elevate to Administrator privileges on an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.