Description
A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by the same Cisco Catalyst SD-WAN Manager instance. This vulnerability requires the multi-tenant feature to be enabled. This vulnerability is due to insufficient user session management within the Cisco Catalyst SD-WAN Manager system. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain unauthorized access to information about another tenant, make configuration changes, or possibly take a tenant offline causing a denial of service condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco SD-WAN vManage
17.2.6affected17.2.7affected17.2.8affected17.2.9affected17.2.10affected17.2.4affected17.2.5affected18.3.1.1affected18.3.3.1affected18.3.3affected18.3.4affected18.3.5affected18.3.7affected18.3.8affected18.3.6.1affected18.3.1affected18.3.0affected18.4.0.1affected18.4.3affected18.4.302affected18.4.303affected18.4.4affected18.4.5affected18.4.0affected18.4.1affected18.4.6affected19.2.0affected19.2.097affected19.2.099affected19.2.1affected19.2.2affected19.2.3affected19.2.31affected19.2.929affected19.2.4affected20.1.1.1affected20.1.12affected20.1.1affected20.1.2affected20.1.3affected19.3.0affected19.1.0affected18.2.0affected20.3.1affected20.3.2affected20.3.2.1affected20.3.3affected20.3.3.1affected20.3.4affected20.3.4.1affected20.3.4.2affected20.3.5affected20.3.6affected20.3.7affected20.3.7.1affected20.3.4.3affected20.3.5.1affected20.3.7.2affected20.4.1affected20.4.1.1affected20.4.1.2affected20.4.2affected20.4.2.2affected20.4.2.1affected20.4.2.3affected20.5.1affected20.5.1.2affected20.5.1.1affected20.6.1affected20.6.1.1affected20.6.2.1affected20.6.2.2affected20.6.2affected20.6.3affected20.6.3.1affected20.6.1.2affected20.6.3.2affected20.6.3.3affected20.6.3.0.45affected20.6.3.0.46affected20.6.3.0.47affected20.7.1affected20.7.1.1affected20.7.2affected20.8.1affected20.9.1affected20.9.2affected20.9.2.1affected20.9.3affected20.9.3.1affected20.9.2.3affected20.9.3.0.12affected20.9.3.0.16affected20.9.3.0.17affected20.9.3.0.18affected20.9.3.0.20affected20.9.3.0.21affected20.9.3.0.23affected20.10.1affected20.10.1.1affected