Cisco Unified Intelligence Center Horizontal Privilege Escalation Vulnerability

A vulnerability exists in the API of Cisco Unified Intelligence Center, allowing authenticated, remote attackers to perform horizontal privilege escalation. This issue arises from inadequate validation of user-supplied parameters in API requests, enabling attackers to execute insecure direct object reference attacks. Successful exploitation could grant access to data associated with different users on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user-specific data on the affected system.

Remediation

Cisco has released software updates to address this vulnerability. Customers with service contracts should obtain these updates through their usual channels. For those without service contracts, contact the Cisco Technical Assistance Center (TAC) for assistance.