CVE-2020-3333

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could...

PT-2020-2901

Name of the Vulnerable Software and Affected Versions Cisco Application Services Engine Software affected versions not specified Description The issue is related to insufficient authentication in the API of the software, allowing an unauthenticated, remote attacker to update event policies on an...

CVE-2020-3333: Missing Authentication for Critical Function

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could...