CVE-2024-20383 - OpenCVE

A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD

History

No history.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-05-15T17:59:49.921Z

Updated: 2024-08-01T21:59:42.314Z

Reserved: 2023-11-08T15:08:07.658Z

Link: CVE-2024-20383

Vulnrichment

Updated: 2024-08-01T21:59:42.314Z

NVD

Status : Awaiting Analysis

Published: 2024-05-15T18:15:09.910

Modified: 2024-05-15T19:15:07.900

Link: CVE-2024-20383

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20383", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.658Z", "datePublished": "2024-05-15T17:59:49.921Z", "dateUpdated": "2024-08-01T21:59:42.314Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T18:13:46.829Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system.\r\n\r The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system."}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"version": "9.0.0-087", "status": "affected"}, {"version": "11.0.0-115", "status": "affected"}, {"version": "11.0.1-161", "status": "affected"}, {"version": "11.5.1-105", "status": "affected"}, {"version": "12.0.0-452", "status": "affected"}, {"version": "12.0.1-011", "status": "affected"}, {"version": "12.5.0-636", "status": "affected"}, {"version": "12.5.0-658", "status": "affected"}, {"version": "12.5.0-678", "status": "affected"}, {"version": "12.5.0-670", "status": "affected"}, {"version": "13.0.0-277", "status": "affected"}, {"version": "13.6.2-078", "status": "affected"}, {"version": "13.8.1-068", "status": "affected"}, {"version": "13.8.1-074", "status": "affected"}, {"version": "13.8.1-108", "status": "affected"}, {"version": "12.8.1-002", "status": "affected"}, {"version": "12.8.1-021", "status": "affected"}, {"version": "14.0.0-404", "status": "affected"}, {"version": "14.1.0-223", "status": "affected"}, {"version": "14.1.0-227", "status": "affected"}, {"version": "14.2.0-212", "status": "affected"}, {"version": "14.2.0-224", "status": "affected"}, {"version": "14.2.1-020", "status": "affected"}, {"version": "14.3.0-120", "status": "affected"}, {"version": "15.0.0-334", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "type": "cwe", "cweId": "CWE-79"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "discovery": "EXTERNAL", "defects": ["CSCwi59618"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20383", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-16T18:50:56.053580Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:40:43.042Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.314Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.314Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20383", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-16T18:50:56.053580Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T14:26:00.329Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"defects": ["CSCwi59618"], "advisory": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Email and Web Manager", "versions": [{"status": "affected", "version": "9.0.0-087"}, {"status": "affected", "version": "11.0.0-115"}, {"status": "affected", "version": "11.0.1-161"}, {"status": "affected", "version": "11.5.1-105"}, {"status": "affected", "version": "12.0.0-452"}, {"status": "affected", "version": "12.0.1-011"}, {"status": "affected", "version": "12.5.0-636"}, {"status": "affected", "version": "12.5.0-658"}, {"status": "affected", "version": "12.5.0-678"}, {"status": "affected", "version": "12.5.0-670"}, {"status": "affected", "version": "13.0.0-277"}, {"status": "affected", "version": "13.6.2-078"}, {"status": "affected", "version": "13.8.1-068"}, {"status": "affected", "version": "13.8.1-074"}, {"status": "affected", "version": "13.8.1-108"}, {"status": "affected", "version": "12.8.1-002"}, {"status": "affected", "version": "12.8.1-021"}, {"status": "affected", "version": "14.0.0-404"}, {"status": "affected", "version": "14.1.0-223"}, {"status": "affected", "version": "14.1.0-227"}, {"status": "affected", "version": "14.2.0-212"}, {"status": "affected", "version": "14.2.0-224"}, {"status": "affected", "version": "14.2.1-020"}, {"status": "affected", "version": "14.3.0-120"}, {"status": "affected", "version": "15.0.0-334"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-xss-bgG5WHOD", "name": "cisco-sa-esa-sma-wsa-xss-bgG5WHOD"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Cisco Crosswork NSO CLI and the ConfD CLI could allow an authenticated, low-privileged, local attacker to elevate privileges to root on the underlying operating system.\r\n\r The vulnerability is due to an incorrect privilege assignment when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-79", "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T18:13:46.829Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20383", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:59:42.314Z", "dateReserved": "2023-11-08T15:08:07.658Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-05-15T17:59:49.921Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}