Missing Authentication for Critical Function in Cisco Data Center Network Manager - CVE-2020-3376
Published: July 30, 2020
Vulnerability identifier: #VU32918
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3376
CWE-ID: CWE-306
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to a failure in the software to perform proper authentication. A remote attacker can brows to one of the hosted URLs in Cisco DCNM, interact with and use certain functions within the Cisco DCNM, leading to authentication bypass and execution of arbitrary actions.
Affected software
Cisco Data Center Network Manager
How to mitigate CVE-2020-3376
Install updates from vendor's website.
Cisco Data Center Network Manager - update to 11.4.1