Description
A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials.
This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Secure Workload | 1.102.21, 1.103.1.12, 2.0.1.34, 2.0.2.20, 2.1.1.29, 2.1.1.31, 2.1.1.33, 2.2.1.34, 2.2.1.35, 2.2.1.39, 2.2.1.41, 2.3.1.41, 2.3.1.45, 2.3.1.49, 2.3.1.50, 2.3.1.51, 2.3.1.52, 2.3.1.53, 3.1.1.53, 3.1.1.54, 3.1.1.55, 3.1.1.59, 3.1.1.61, 3.1.1.65, 3.1.1.67, 3.1.1.70, 3.2.1.18, 3.2.1.19, 3.2.1.20, 3.2.1.2… | — |