HTTP: Cisco Data Center Network Manager SecurityManager Authentication Bypass

This signature detects attempts to exploit a known vulnerability against SecurityManager component of Cisco Data Center Network Manager. A successful attack can lead to security bypass.

Extended Description

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Products

Cisco data_center_network_manager

Short Name
HTTP:CISCO:DCNM-SM-AUTHBYPASS
Severity
Critical
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Authentication Bypass CVE-2019-15976 Center Cisco Data Manager Network SecurityManager
Release Date
01/30/2020
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3716
False Positive
Rarely
Vendors

Cisco

CVSS Score

10.0

Found a potential security threat?