Skip to content
NewA calmer, faster ZeroHour

CVE-2018-0435

CVSS 3.0
9.1 critical
EPSS
1%p64
Published
·
Modified
Analyze CVE-2018-0435 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could exploit this vulnerability to view and potentially modify data for their organization or other organizations. A successful exploit could allow the attacker to read or modify data across multiple organizations.

Vendors
cisco
Products
umbrella
Weakness
CWE-287
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

In the news

3 stories