{"uuid": "79cdb8ea-e4c3-41d2-b677-faa7ee4f39ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-15975", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"MR_ME\", \"Yann Castel (yann.castel \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploit is able to add an admin account to a Cisco DCNM with credentials you can choose.\\n          After that, you can login to the web interface with those credentials.\\n          The only necessary condition is the more or less recent connection of an admin as this exploit\\n          uses a kind of session stealing.\", \"disclosure_date\": \"2020-06-01\", \"fullname\": \"auxiliary/admin/networking/cisco_dcnm_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Cisco DCNM auth bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/networking/cisco_dcnm_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/networking/cisco_dcnm_auth_bypass\", \"references\": [\"CVE-2019-15975\", \"EDB-48018\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:53.150995Z"}