Main Vulnerability Database Vulnerabilities #VU72508

Cross-site request forgery in Cisco Application Policy Infrastructure Controller and Cisco Cloud Application Policy Infrastructure Controller - CVE-2023-20011

Published: February 23, 2023

Vulnerability identifier: #VU72508

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20011

CWE-ID: CWE-352

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin in the web-based management interface. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

Affected software

Cisco Application Policy Infrastructure Controller
Cisco Cloud Application Policy Infrastructure Controller

How to mitigate CVE-2023-20011

Install updates from vendor's website.

Cisco Application Policy Infrastructure Controller - addressed in versions 5.2(7g), 6.0(2e)
Cisco Cloud Application Policy Infrastructure Controller - update to 25.0(5)

External References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV

Related Security Bulletins