CVE-2021-1399 Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability

Medium 4.3 Published 8 Apr 2021 Updated 8 Nov 2024

An authenticated remote attacker can modify data in the Self Care Portal without proper authorization due to insufficient validation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-1399?

CVE-2021-1399 is a medium-severity missing authorization vulnerability in Cisco Unified Communications Manager, published on 8 Apr 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization.

Weakness: CWE-302

Which versions are affected by CVE-2021-1399?

It affects 1 product.

Products include Cisco Unified Communications Manager.

How do I fix CVE-2021-1399?

No fix has been published for CVE-2021-1399 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2021-1399 being exploited?

There is no known exploitation of CVE-2021-1399 in the wild and no public exploit code.

All Cisco Unified Communications Manager vulnerabilities

Sources

Also known as GHSA-wpj5-cw66-j932.