Cisco Data Center Network Manager up to 12.1.3b Web-based Management Interface cross-site request forgery

Summaryinfo

A vulnerability was found in Cisco Data Center Network Manager, Nexus Dashboard, Nexus Dashboard Orchestrator and Nexus Dashboard Insights up to 12.1.3b. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Web-based Management Interface. Executing a manipulation can lead to cross-site request forgery. This vulnerability is handled as CVE-2024-20281. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Data Center Network Manager, Nexus Dashboard, Nexus Dashboard Orchestrator and Nexus Dashboard Insights up to 12.1.3b. It has been declared as problematic. This vulnerability affects some unknown processing of the component Web-based Management Interface. The manipulation with an unknown input leads to a cross-site request forgery vulnerability. The CWE definition for the vulnerability is CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. As an impact it is known to affect integrity. CVE summarizes:

A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the affected user has administrative privileges, these actions could include modifying the system configuration and creating new privileged accounts. Note: There are internal security mechanisms in place that limit the scope of this exploit, reducing the Security Impact Rating of this vulnerability.

The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability was named CVE-2024-20281 since 11/08/2023. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Forum Software

Vendor

• Cisco

Name

• Data Center Network Manager
• Nexus Dashboard
• Nexus Dashboard Insights
• Nexus Dashboard Orchestrator

Version

• 12.0.1a
• 12.0.2d
• 12.0.2f
• 12.1
• 12.1.1e
• 12.1.2e
• 12.1.3b

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion