CVE-2023-20136

A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials. This vulnerability is due to improper...

CVE-2023-20136

creationtimestamp| type| source ---|---|--- 2023-06-28 18:13:00+00:00| seen| Telegram/nIEomT5Z-R3fCXEzymiiBRLmymeFkQskA1l3X7DOLrFsm1c...

CVE-2023-20136

CVE-2023-20136 concerns a privilege-escalation in the OpenAPI of Cisco Secure Workload. An authenticated, read-only user with valid credentials could invoke OpenAPI calls that should require Administrator privileges, enabling actions such as creating/deleting user labels due to RBAC misconfigurat...