Lucene search

CiscoCVE-2018-0260

HistoryApr 19, 2018 - 8:29 p.m.

CVE-2018-0260

2018-04-1920:29:01

CWE-20

cisco

web.nvd.nist.gov

cisco

mate live

vulnerability

web interface

unauthenticated

remote attacker

input validation

authorization

exploit

http request

cve-2018-0260

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and download the contents of certain web application virtual directories. The vulnerability is due to lack of proper input validation and authorization of HTTP requests. An attacker could exploit this vulnerability by sending a malicious HTTP request to the targeted application. An exploit could allow the attacker to view sensitive information that should require authentication. Cisco Bug IDs: CSCvh31272.

Affected configurations

Nvd

Node

ciscomate_liveMatch1.3

VendorProductVersionCPE
ciscomate_live1.3cpe:2.3:a:cisco:mate_live:1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	mate_live	1.3	cpe:2.3:a:cisco:mate_live:1.3:::::::*

CNA Affected

[
  {
    "product": "Cisco MATE Live",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco MATE Live"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103946

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-MATE1

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

Related for CVE-2018-0260