CVE-2018-0121 Auth bypass in Cisco Elastic Services Controller
Unauthenticated attackers can bypass authentication by submitting an empty password to gain administrator privileges on the Cisco Elastic Services Controller web portal.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0121?
CVE-2018-0121 is a critical authentication bypass vulnerability in Cisco Elastic Services Controller, published on 22 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The vulnerability is due to improper security restrictions that are imposed by the web-based service portal of the affected software. An attacker could exploit this vulnerability by submitting an empty password value to an affected portal when prompted to enter an administrative password for the portal. A successful exploit could allow the attacker to bypass authentication and gain administrator privileges for the web-based service portal of the affected software. This vulnerability affects Cisco Elastic Services Controller Software Release 3.0.0. Cisco Bug IDs: CSCvg29809.
Weakness: CWE-287
Which versions are affected by CVE-2018-0121?
It affects 2 products.
Products include Cisco Elastic Services Controller, Cisco Virtual Managed Services.
How do I fix CVE-2018-0121?
No fix has been published for CVE-2018-0121 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-0121 being exploited?
There is no known exploitation of CVE-2018-0121 in the wild and no public exploit code.
Other vulnerabilities in Cisco Elastic Services Controller
- CVE-2019-1867 Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability
- CVE-2017-6713 Hardcoded credentials in Cisco Elastic Services Controller
- CVE-2017-6712 Command injection in Cisco Elastic Services Controller
- CVE-2017-6682 Command injection in Cisco Elastic Services Controller
- CVE-2017-6683 Command injection in Cisco Elastic Services Controller
Sources
Also known as GHSA-7h7w-c9m3-p7hv.