PT-2021-1877
CVE-2021-1218
·
Published
2021-01-20
·
Updated
2021-01-28
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Smart Software Manager On-Prem (affected versions not specified)
Cisco Smart Software Manager satellite (affected versions not specified)
Description
The issue is related to the web management interface of Cisco Smart Software Manager, where improper input validation of URL parameters in an HTTP request can lead to a redirect to an undesired web page. An attacker could exploit this by sending a crafted HTTP request, potentially redirecting a user to a malicious website.
Recommendations
For Cisco Smart Software Manager On-Prem, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Cisco Smart Software Manager satellite, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾