CVE-2023-20136
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Summary
A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials. This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Secure Workload | 1.102.21 | affected |
| Cisco | Cisco Secure Workload | 1.103.1.12 | affected |
| Cisco | Cisco Secure Workload | 2.0.1.34 | affected |
| Cisco | Cisco Secure Workload | 2.0.2.20 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.29 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.31 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.33 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.34 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.35 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.39 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.41 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.41 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.45 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.49 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.50 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.51 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.52 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.53 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.53 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.54 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.55 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.59 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.61 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.65 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.67 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.70 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.18 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.19 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.28 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.31 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.32 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.33 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.12 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.16 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.2 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.23 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.28 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.33 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.35 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.42 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.5 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.50 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.53 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.14 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.19 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.28 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.34 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.35 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.6 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.40 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.17 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.2 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.23 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.30 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.31 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.37 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.17 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.21 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.36 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.47 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.5 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.52 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.22 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.5 | affected |
Weaknesses
- CWE-648: Incorrect Use of Privileged APIs
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.