Security Advisory

CVE-2019-15990

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-26 03:42:02
Last updated 2024-11-19 18:51:36
Assigner cisco
State PUBLISHED

Description

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.