CVE-2019-1626

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage (affected versions not specified)

Description A vulnerability in the vManage web-based UI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The issue is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this by logging in to the vManage Web UI and sending crafted HTTP requests to vManage, potentially allowing them to make unauthorized changes to the configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.