Cisco Virtual Managed Services vulnerabilities
2 known vulnerabilities affecting cisco/virtual_managed_services.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2018-0121P2CRITICALCVSS 9.8v3.02018-02-22
CVE-2018-0121 [CRITICAL] CWE-287 CVE-2018-0121: A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic
A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The vulnerability is due to improper security restrictions that a
nvd
CVE-2018-0130P2CRITICALCVSS 9.8v3.02018-02-22
CVE-2018-0130 [CRITICAL] CWE-264 CVE-2018-0130: A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Servi
A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials for the web-based service portal of the affected softwa
nvd