Cisco BPA, WSA Bugs Allow Remote Cyberattacks

A set of high-severity privilege-escalation vulnerabilities affecting Business Process Automation BPA application and Cisco’s Web Security Appliance WSA and could allow authenticated, remote attackers to access sensitive data or take over a targeted system. The first two bugs CVE-2021-1574 and...

CVE-2021-1574

Cisco BPA privilege-escalation vulnerabilities (CVE-2021-1574) affect the web-based management interface of Cisco Business Process Automation prior to release 3.1. The root cause is improper authorization enforcement for certain management features and access to log files containing confidential ...