Lucene search

[email protected]CVE-2019-1816

HistoryMay 03, 2019 - 5:29 p.m.

CVE-2019-1816

2019-05-0317:29:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco wsa

vulnerability

log subscription

command injection

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The vulnerability is due to insufficient validation of user-supplied input on the web and command-line interface. An attacker could exploit this vulnerability by authenticating to the affected device and injecting scripting commands in the scope of the log subscription subsystem. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.

Affected configurations

NVD

Node

ciscoweb_security_applianceMatch10.5.2-072

ciscoweb_security_applianceMatch11.0.0-641

ciscoweb_security_applianceMatch11.5.0-fcs-614

ciscoweb_security_applianceMatchwsa10.5.0-fcs-000

CPENameOperatorVersion
cisco:web_security_appliancecisco web security applianceeq10.5.2-072
cisco:web_security_appliancecisco web security applianceeq11.0.0-641
cisco:web_security_appliancecisco web security applianceeq11.5.0-fcs-614
cisco:web_security_appliancecisco web security applianceeqwsa10.5.0-fcs-000

CPE	Name	Operator	Version
cisco:web_security_appliance	cisco web security appliance	eq	10.5.2-072
cisco:web_security_appliance	cisco web security appliance	eq	11.0.0-641
cisco:web_security_appliance	cisco web security appliance	eq	11.5.0-fcs-614
cisco:web_security_appliance	cisco web security appliance	eq	wsa10.5.0-fcs-000

CNA Affected

[
  {
    "product": "Cisco Web Security Appliance (WSA)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "10.1.4-017",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "10.5.4-018",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "11.5.2-020",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "11.7.0-406",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-wsa-privesc

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-1816

nessus1 cvelist1 nvd1 cisco1 prion1