CVE-2020-3400

CVE-2020-3400 affects Cisco IOS XE Software (Web UI) where insufficient authorization of web UI access requests allows an authenticated, remote attacker to access parts of the Web UI that should be restricted. An attacker can send a crafted HTTP request to the Web UI and cause a Read-Only user to...