https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:15:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03793 bdu:2020-03793 https://cve.radiocsirt.org/vuln/bdu:2020-03793 https://cve.radiocsirt.org/vuln/certfr-2020-avi-472 certfr-2020-avi-472 https://cve.radiocsirt.org/vuln/certfr-2020-avi-472 https://cve.radiocsirt.org/vuln/cisco-sa-dcnm-bypass-dyeejums <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs&#34;]</p> <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-dyEejUMs&#34;]</p> https://cve.radiocsirt.org/vuln/cisco-sa-dcnm-bypass-dyeejums https://cve.radiocsirt.org/vuln/cnvd-2020-44062 cnvd-2020-44062 https://cve.radiocsirt.org/vuln/cnvd-2020-44062 https://cve.radiocsirt.org/vuln/euvd-2026-201410 EUVD-2026-201410 https://cve.radiocsirt.org/vuln/euvd-2026-201410 https://cve.radiocsirt.org/vuln/fkie_cve-2020-3382 <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges.</p> <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-3382 https://cve.radiocsirt.org/vuln/ghsa-xgr2-w47g-6j54 <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges.</p> <p>A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability exists because different installations share a static encryption key. An attacker could exploit this vulnerability by using the static key to craft a valid session token. A successful exploit could allow the attacker to perform arbitrary actions through the REST API with administrative privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-xgr2-w47g-6j54 https://cve.radiocsirt.org/vuln/gsd-2020-3382 gsd-2020-3382 https://cve.radiocsirt.org/vuln/gsd-2020-3382