Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) could enable an authenticated, remote attacker with read-only permissions to elevate their privileges to high and act as a high-privileged user. This issue arises because sensitive session information is logged in audit trails, allowing an attacker to exploit the vulnerability by upgrading their permissions. A successful exploitation could permit the attacker to perform actions as a high-privileged user.

Impact

Exploitation of this vulnerability could allow an attacker to gain high-level privileges in Cisco Catalyst SD-WAN Manager, enabling them to perform actions reserved for high-privileged users.

Remediation

Cisco has released software updates to address this vulnerability. Customers should upgrade to the fixed software version. For additional information, consult the Cisco Catalyst SD-WAN Upgrade Matrix or contact the Cisco Technical Assistance Center (TAC).