CVE-2023-20238
Vulnerability from cvelistv5
Published
2023-09-06 17:08
Modified
2024-10-23 19:41
Severity ?
Summary
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system.
Impacted products
CiscoCisco BroadWorks
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:05:36.796Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-bw-auth-bypass-kCggMWhX",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-20238",
                "options": [
                  {
                    "Exploitation": "None"
                  },
                  {
                    "Automatable": "Yes"
                  },
                  {
                    "Technical Impact": "Total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:38:47.577160Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-23T19:41:58.912Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco BroadWorks",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "23.0"
            },
            {
              "status": "affected",
              "version": "23.0 ap383785"
            },
            {
              "status": "affected",
              "version": "23.0 ap382487"
            },
            {
              "status": "affected",
              "version": "23.0 ap381781"
            },
            {
              "status": "affected",
              "version": "23.0 ap360007"
            },
            {
              "status": "affected",
              "version": "23.0 ap369295"
            },
            {
              "status": "affected",
              "version": "23.0 ap366358"
            },
            {
              "status": "affected",
              "version": "23.0 ap366677"
            },
            {
              "status": "affected",
              "version": "23.0 ap366803"
            },
            {
              "status": "affected",
              "version": "23.0 ap363128"
            },
            {
              "status": "affected",
              "version": "23.0 ap369529"
            },
            {
              "status": "affected",
              "version": "23.0 ap368445"
            },
            {
              "status": "affected",
              "version": "23.0 ap369227"
            },
            {
              "status": "affected",
              "version": "23.0 ap367332"
            },
            {
              "status": "affected",
              "version": "23.0 ap369881"
            },
            {
              "status": "affected",
              "version": "23.0 ap367874"
            },
            {
              "status": "affected",
              "version": "23.0 ap367974"
            },
            {
              "status": "affected",
              "version": "23.0 ap367998"
            },
            {
              "status": "affected",
              "version": "23.0 ap372337"
            },
            {
              "status": "affected",
              "version": "23.0 ap372706"
            },
            {
              "status": "affected",
              "version": "23.0 ap370193"
            },
            {
              "status": "affected",
              "version": "23.0 ap372389"
            },
            {
              "status": "affected",
              "version": "23.0 ap372708"
            },
            {
              "status": "affected",
              "version": "23.0 ap370911"
            },
            {
              "status": "affected",
              "version": "23.0 ap371681"
            },
            {
              "status": "affected",
              "version": "23.0 ap370952"
            },
            {
              "status": "affected",
              "version": "23.0 ap371436"
            },
            {
              "status": "affected",
              "version": "23.0 ap371155"
            },
            {
              "status": "affected",
              "version": "23.0 ap371682"
            },
            {
              "status": "affected",
              "version": "23.0 ap371775"
            },
            {
              "status": "affected",
              "version": "23.0 ap375449"
            },
            {
              "status": "affected",
              "version": "23.0 ap375720"
            },
            {
              "status": "affected",
              "version": "23.0 ap375661"
            },
            {
              "status": "affected",
              "version": "23.0 ap375097"
            },
            {
              "status": "affected",
              "version": "23.0 ap373562"
            },
            {
              "status": "affected",
              "version": "23.0 ap373015"
            },
            {
              "status": "affected",
              "version": "23.0 ap374971"
            },
            {
              "status": "affected",
              "version": "23.0 ap373034"
            },
            {
              "status": "affected",
              "version": "23.0 ap374324"
            },
            {
              "status": "affected",
              "version": "23.0 ap373899"
            },
            {
              "status": "affected",
              "version": "23.0 ap376041"
            },
            {
              "status": "affected",
              "version": "23.0 ap375003"
            },
            {
              "status": "affected",
              "version": "23.0 ap373539"
            },
            {
              "status": "affected",
              "version": "23.0 ap376179"
            },
            {
              "status": "affected",
              "version": "23.0 ap373299"
            },
            {
              "status": "affected",
              "version": "23.0 ap375908"
            },
            {
              "status": "affected",
              "version": "23.0 ap373391"
            },
            {
              "status": "affected",
              "version": "23.0 ap376252"
            },
            {
              "status": "affected",
              "version": "23.0 ap376429"
            },
            {
              "status": "affected",
              "version": "23.0 ap376410"
            },
            {
              "status": "affected",
              "version": "23.0 ap376426"
            },
            {
              "status": "affected",
              "version": "23.0 ap376485"
            },
            {
              "status": "affected",
              "version": "23.0 ap376620"
            },
            {
              "status": "affected",
              "version": "23.0 ap378025"
            },
            {
              "status": "affected",
              "version": "23.0 ap376671"
            },
            {
              "status": "affected",
              "version": "23.0 ap376614"
            },
            {
              "status": "affected",
              "version": "23.0 ap377578"
            },
            {
              "status": "affected",
              "version": "23.0 ap377516"
            },
            {
              "status": "affected",
              "version": "23.0 ap377515"
            },
            {
              "status": "affected",
              "version": "23.0 ap377494"
            },
            {
              "status": "affected",
              "version": "23.0 ap377984"
            },
            {
              "status": "affected",
              "version": "23.0 ap378863"
            },
            {
              "status": "affected",
              "version": "23.0 ap378882"
            },
            {
              "status": "affected",
              "version": "23.0 ap378218"
            },
            {
              "status": "affected",
              "version": "23.0 ap380161"
            },
            {
              "status": "affected",
              "version": "23.0 ap378257"
            },
            {
              "status": "affected",
              "version": "23.0 ap379888"
            },
            {
              "status": "affected",
              "version": "23.0 ap379326"
            },
            {
              "status": "affected",
              "version": "23.0 ap377149"
            },
            {
              "status": "affected",
              "version": "23.0 ap380446"
            },
            {
              "status": "affected",
              "version": "23.0 ap380180"
            },
            {
              "status": "affected",
              "version": "23.0 ap376935"
            },
            {
              "status": "affected",
              "version": "23.0 ap380473"
            },
            {
              "status": "affected",
              "version": "23.0 ap381091"
            },
            {
              "status": "affected",
              "version": "23.0 ap380783"
            },
            {
              "status": "affected",
              "version": "23.0 ap380537"
            },
            {
              "status": "affected",
              "version": "23.0 ap380512"
            },
            {
              "status": "affected",
              "version": "23.0 ap381072"
            },
            {
              "status": "affected",
              "version": "23.0 ap381584"
            },
            {
              "status": "affected",
              "version": "23.0 ap381088"
            },
            {
              "status": "affected",
              "version": "23.0 ap382053"
            },
            {
              "status": "affected",
              "version": "23.0 ap382253"
            },
            {
              "status": "affected",
              "version": "23.0 ap382709"
            },
            {
              "status": "affected",
              "version": "23.0 ap382717"
            },
            {
              "status": "affected",
              "version": "23.0 ap381498"
            },
            {
              "status": "affected",
              "version": "23.0 ap382992"
            },
            {
              "status": "affected",
              "version": "23.0 ap383594"
            },
            {
              "status": "affected",
              "version": "23.0 ap383168"
            },
            {
              "status": "affected",
              "version": "23.0 ap382362"
            },
            {
              "status": "affected",
              "version": "23.0 ap384431"
            },
            {
              "status": "affected",
              "version": "23.0 ap384428"
            },
            {
              "status": "affected",
              "version": "22.0"
            },
            {
              "status": "affected",
              "version": "22.0 ap375345"
            },
            {
              "status": "affected",
              "version": "22.0 ap382358"
            },
            {
              "status": "affected",
              "version": "22.0 ap347741"
            },
            {
              "status": "affected",
              "version": "22.0 ap377577"
            },
            {
              "status": "affected",
              "version": "22.0 ap372243"
            },
            {
              "status": "affected",
              "version": "22.0 ap372504"
            },
            {
              "status": "affected",
              "version": "22.0 ap360116"
            },
            {
              "status": "affected",
              "version": "22.0 ap368125"
            },
            {
              "status": "affected",
              "version": "22.0 ap367732"
            },
            {
              "status": "affected",
              "version": "22.0 ap357506"
            },
            {
              "status": "affected",
              "version": "22.0 ap380486"
            },
            {
              "status": "affected",
              "version": "22.0 ap379780"
            },
            {
              "status": "affected",
              "version": "22.0 ap351263"
            },
            {
              "status": "affected",
              "version": "22.0 ap366916"
            },
            {
              "status": "affected",
              "version": "22.0 ap363363"
            },
            {
              "status": "affected",
              "version": "22.0 ap374507"
            },
            {
              "status": "affected",
              "version": "22.0 ap372845"
            },
            {
              "status": "affected",
              "version": "22.0 ap373684"
            },
            {
              "status": "affected",
              "version": "22.0 ap366898"
            },
            {
              "status": "affected",
              "version": "22.0 ap368180"
            },
            {
              "status": "affected",
              "version": "22.0 ap366882"
            },
            {
              "status": "affected",
              "version": "22.0 ap369774"
            },
            {
              "status": "affected",
              "version": "22.0 ap374269"
            },
            {
              "status": "affected",
              "version": "22.0 ap365223"
            },
            {
              "status": "affected",
              "version": "22.0 ap359972"
            },
            {
              "status": "affected",
              "version": "22.0 ap359433"
            },
            {
              "status": "affected",
              "version": "22.0 ap359991"
            },
            {
              "status": "affected",
              "version": "22.0 ap358357"
            },
            {
              "status": "affected",
              "version": "22.0 ap360244"
            },
            {
              "status": "affected",
              "version": "22.0 ap369931"
            },
            {
              "status": "affected",
              "version": "22.0 ap367874"
            },
            {
              "status": "affected",
              "version": "22.0 ap376710"
            },
            {
              "status": "affected",
              "version": "22.0 ap342836"
            },
            {
              "status": "affected",
              "version": "22.0 ap346307"
            },
            {
              "status": "affected",
              "version": "22.0 ap345032"
            },
            {
              "status": "affected",
              "version": "22.0 ap354070"
            },
            {
              "status": "affected",
              "version": "22.0 ap354069"
            },
            {
              "status": "affected",
              "version": "22.0 ap353915"
            },
            {
              "status": "affected",
              "version": "22.0 ap349201"
            },
            {
              "status": "affected",
              "version": "22.0 ap350217"
            },
            {
              "status": "affected",
              "version": "22.0 ap350179"
            },
            {
              "status": "affected",
              "version": "22.0 ap354313"
            },
            {
              "status": "affected",
              "version": "22.0 ap354098"
            },
            {
              "status": "affected",
              "version": "22.0 ap353975"
            },
            {
              "status": "affected",
              "version": "22.0 ap348945"
            },
            {
              "status": "affected",
              "version": "22.0 ap354090"
            },
            {
              "status": "affected",
              "version": "22.0 ap350573"
            },
            {
              "status": "affected",
              "version": "22.0 ap352516"
            },
            {
              "status": "affected",
              "version": "22.0 ap352109"
            },
            {
              "status": "affected",
              "version": "22.0 ap353384"
            },
            {
              "status": "affected",
              "version": "22.0 ap353490"
            },
            {
              "status": "affected",
              "version": "22.0 ap352962"
            },
            {
              "status": "affected",
              "version": "22.0 ap352703"
            },
            {
              "status": "affected",
              "version": "22.0 ap353418"
            },
            {
              "status": "affected",
              "version": "22.0 ap351700"
            },
            {
              "status": "affected",
              "version": "22.0 ap352205"
            },
            {
              "status": "affected",
              "version": "22.0 ap353360"
            },
            {
              "status": "affected",
              "version": "22.0 ap352932"
            },
            {
              "status": "affected",
              "version": "22.0 ap354921"
            },
            {
              "status": "affected",
              "version": "22.0 ap352726"
            },
            {
              "status": "affected",
              "version": "22.0 ap355757"
            },
            {
              "status": "affected",
              "version": "22.0 ap352972"
            },
            {
              "status": "affected",
              "version": "22.0 ap353577"
            },
            {
              "status": "affected",
              "version": "22.0 ap356603"
            },
            {
              "status": "affected",
              "version": "22.0 ap355894"
            },
            {
              "status": "affected",
              "version": "22.0 ap355385"
            },
            {
              "status": "affected",
              "version": "22.0 ap353311"
            },
            {
              "status": "affected",
              "version": "22.0 ap355300"
            },
            {
              "status": "affected",
              "version": "22.0 ap355083"
            },
            {
              "status": "affected",
              "version": "22.0 ap357047"
            },
            {
              "status": "affected",
              "version": "22.0 ap353681"
            },
            {
              "status": "affected",
              "version": "22.0 ap356848"
            },
            {
              "status": "affected",
              "version": "22.0 ap356706"
            },
            {
              "status": "affected",
              "version": "22.0 ap356474"
            },
            {
              "status": "affected",
              "version": "22.0 ap355091"
            },
            {
              "status": "affected",
              "version": "22.0 ap354785"
            },
            {
              "status": "affected",
              "version": "22.0 ap355905"
            },
            {
              "status": "affected",
              "version": "22.0 ap355365"
            },
            {
              "status": "affected",
              "version": "22.0 ap356359"
            },
            {
              "status": "affected",
              "version": "22.0 ap356434"
            },
            {
              "status": "affected",
              "version": "22.0 ap354936"
            },
            {
              "status": "affected",
              "version": "22.0 ap355285"
            },
            {
              "status": "affected",
              "version": "22.0 ap355674"
            },
            {
              "status": "affected",
              "version": "22.0 ap355922"
            },
            {
              "status": "affected",
              "version": "22.0 ap354597"
            },
            {
              "status": "affected",
              "version": "22.0 ap356458"
            },
            {
              "status": "affected",
              "version": "22.0 ap356140"
            },
            {
              "status": "affected",
              "version": "22.0 ap354413"
            },
            {
              "status": "affected",
              "version": "22.0 ap357400"
            },
            {
              "status": "affected",
              "version": "22.0 ap357632"
            },
            {
              "status": "affected",
              "version": "22.0 ap356390"
            },
            {
              "status": "affected",
              "version": "22.0 ap357607"
            },
            {
              "status": "affected",
              "version": "22.0 ap357447"
            },
            {
              "status": "affected",
              "version": "22.0 ap357560"
            },
            {
              "status": "affected",
              "version": "22.0 ap357645"
            },
            {
              "status": "affected",
              "version": "22.0 ap357768"
            },
            {
              "status": "affected",
              "version": "22.0 ap357859"
            },
            {
              "status": "affected",
              "version": "22.0 ap357769"
            },
            {
              "status": "affected",
              "version": "22.0 ap358469"
            },
            {
              "status": "affected",
              "version": "22.0 ap359049"
            },
            {
              "status": "affected",
              "version": "22.0 ap358971"
            },
            {
              "status": "affected",
              "version": "22.0 ap358246"
            },
            {
              "status": "affected",
              "version": "22.0 ap358234"
            },
            {
              "status": "affected",
              "version": "22.0 ap359156"
            },
            {
              "status": "affected",
              "version": "22.0 ap359549"
            },
            {
              "status": "affected",
              "version": "22.0 ap358454"
            },
            {
              "status": "affected",
              "version": "22.0 ap358563"
            },
            {
              "status": "affected",
              "version": "22.0 ap360250"
            },
            {
              "status": "affected",
              "version": "22.0 ap360564"
            },
            {
              "status": "affected",
              "version": "22.0 ap358887"
            },
            {
              "status": "affected",
              "version": "22.0 ap359470"
            },
            {
              "status": "affected",
              "version": "22.0 ap359465"
            },
            {
              "status": "affected",
              "version": "22.0 ap359748"
            },
            {
              "status": "affected",
              "version": "22.0 ap360817"
            },
            {
              "status": "affected",
              "version": "22.0 ap360201"
            },
            {
              "status": "affected",
              "version": "22.0 ap361153"
            },
            {
              "status": "affected",
              "version": "22.0 ap360904"
            },
            {
              "status": "affected",
              "version": "22.0 ap359644"
            },
            {
              "status": "affected",
              "version": "22.0 ap359765"
            },
            {
              "status": "affected",
              "version": "22.0 ap360912"
            },
            {
              "status": "affected",
              "version": "22.0 ap360184"
            },
            {
              "status": "affected",
              "version": "22.0 ap361520"
            },
            {
              "status": "affected",
              "version": "22.0 ap362771"
            },
            {
              "status": "affected",
              "version": "22.0 ap361445"
            },
            {
              "status": "affected",
              "version": "22.0 ap361560"
            },
            {
              "status": "affected",
              "version": "22.0 ap362848"
            },
            {
              "status": "affected",
              "version": "22.0 ap361559"
            },
            {
              "status": "affected",
              "version": "22.0 ap361820"
            },
            {
              "status": "affected",
              "version": "22.0 ap361533"
            },
            {
              "status": "affected",
              "version": "22.0 ap362163"
            },
            {
              "status": "affected",
              "version": "22.0 ap362001"
            },
            {
              "status": "affected",
              "version": "22.0 ap362276"
            },
            {
              "status": "affected",
              "version": "22.0 ap362490"
            },
            {
              "status": "affected",
              "version": "22.0 ap361154"
            },
            {
              "status": "affected",
              "version": "22.0 ap362799"
            },
            {
              "status": "affected",
              "version": "22.0 ap363815"
            },
            {
              "status": "affected",
              "version": "22.0 ap362328"
            },
            {
              "status": "affected",
              "version": "22.0 ap363332"
            },
            {
              "status": "affected",
              "version": "22.0 ap368026"
            },
            {
              "status": "affected",
              "version": "22.0 ap363521"
            },
            {
              "status": "affected",
              "version": "22.0 ap364199"
            },
            {
              "status": "affected",
              "version": "22.0 ap363568"
            },
            {
              "status": "affected",
              "version": "22.0 ap363759"
            },
            {
              "status": "affected",
              "version": "22.0 ap363596"
            },
            {
              "status": "affected",
              "version": "22.0 ap366701"
            },
            {
              "status": "affected",
              "version": "22.0 ap366174"
            },
            {
              "status": "affected",
              "version": "22.0 ap363729"
            },
            {
              "status": "affected",
              "version": "22.0 ap363770"
            },
            {
              "status": "affected",
              "version": "22.0 ap366358"
            },
            {
              "status": "affected",
              "version": "22.0 ap366744"
            },
            {
              "status": "affected",
              "version": "22.0 ap366180"
            },
            {
              "status": "affected",
              "version": "22.0 ap366649"
            },
            {
              "status": "affected",
              "version": "22.0 ap365172"
            },
            {
              "status": "affected",
              "version": "22.0 ap365115"
            },
            {
              "status": "affected",
              "version": "22.0 ap366656"
            },
            {
              "status": "affected",
              "version": "22.0 ap364521"
            },
            {
              "status": "affected",
              "version": "22.0 ap364844"
            },
            {
              "status": "affected",
              "version": "22.0 ap364781"
            },
            {
              "status": "affected",
              "version": "22.0 ap365146"
            },
            {
              "status": "affected",
              "version": "22.0 ap364797"
            },
            {
              "status": "affected",
              "version": "22.0 ap364932"
            },
            {
              "status": "affected",
              "version": "22.0 ap365545"
            },
            {
              "status": "affected",
              "version": "22.0 ap365800"
            },
            {
              "status": "affected",
              "version": "22.0 ap365173"
            },
            {
              "status": "affected",
              "version": "22.0 ap364473"
            },
            {
              "status": "affected",
              "version": "22.0 ap365400"
            },
            {
              "status": "affected",
              "version": "22.0 ap367396"
            },
            {
              "status": "affected",
              "version": "22.0 ap365632"
            },
            {
              "status": "affected",
              "version": "22.0 ap365905"
            },
            {
              "status": "affected",
              "version": "22.0 ap367109"
            },
            {
              "status": "affected",
              "version": "22.0 ap365449"
            },
            {
              "status": "affected",
              "version": "22.0 ap365685"
            },
            {
              "status": "affected",
              "version": "22.0 ap367434"
            },
            {
              "status": "affected",
              "version": "22.0 ap365597"
            },
            {
              "status": "affected",
              "version": "22.0 ap365801"
            },
            {
              "status": "affected",
              "version": "22.0 ap365730"
            },
            {
              "status": "affected",
              "version": "22.0 ap365758"
            },
            {
              "status": "affected",
              "version": "22.0 ap365920"
            },
            {
              "status": "affected",
              "version": "22.0 ap371313"
            },
            {
              "status": "affected",
              "version": "22.0 ap367291"
            },
            {
              "status": "affected",
              "version": "22.0 ap365727"
            },
            {
              "status": "affected",
              "version": "22.0 ap367524"
            },
            {
              "status": "affected",
              "version": "22.0 ap371587"
            },
            {
              "status": "affected",
              "version": "22.0 ap367453"
            },
            {
              "status": "affected",
              "version": "22.0 ap365601"
            },
            {
              "status": "affected",
              "version": "22.0 ap365779"
            },
            {
              "status": "affected",
              "version": "22.0 ap371871"
            },
            {
              "status": "affected",
              "version": "22.0 ap371437"
            },
            {
              "status": "affected",
              "version": "22.0 ap372043"
            },
            {
              "status": "affected",
              "version": "22.0 ap372016"
            },
            {
              "status": "affected",
              "version": "22.0 ap367367"
            },
            {
              "status": "affected",
              "version": "22.0 ap372072"
            },
            {
              "status": "affected",
              "version": "22.0 ap372177"
            },
            {
              "status": "affected",
              "version": "22.0 ap371681"
            },
            {
              "status": "affected",
              "version": "22.0 ap372354"
            },
            {
              "status": "affected",
              "version": "22.0 ap371656"
            },
            {
              "status": "affected",
              "version": "22.0 ap371033"
            },
            {
              "status": "affected",
              "version": "22.0 ap371583"
            },
            {
              "status": "affected",
              "version": "22.0 ap371911"
            },
            {
              "status": "affected",
              "version": "22.0 ap371467"
            },
            {
              "status": "affected",
              "version": "22.0 ap372371"
            },
            {
              "status": "affected",
              "version": "22.0 ap368695"
            },
            {
              "status": "affected",
              "version": "22.0 ap368913"
            },
            {
              "status": "affected",
              "version": "22.0 ap368987"
            },
            {
              "status": "affected",
              "version": "22.0 ap372024"
            },
            {
              "status": "affected",
              "version": "22.0 ap372152"
            },
            {
              "status": "affected",
              "version": "22.0 ap371961"
            },
            {
              "status": "affected",
              "version": "22.0 ap369674"
            },
            {
              "status": "affected",
              "version": "22.0 ap369173"
            },
            {
              "status": "affected",
              "version": "22.0 ap369863"
            },
            {
              "status": "affected",
              "version": "22.0 ap369641"
            },
            {
              "status": "affected",
              "version": "22.0 ap368604"
            },
            {
              "status": "affected",
              "version": "22.0 ap368087"
            },
            {
              "status": "affected",
              "version": "22.0 ap368216"
            },
            {
              "status": "affected",
              "version": "22.0 ap369934"
            },
            {
              "status": "affected",
              "version": "22.0 ap368326"
            },
            {
              "status": "affected",
              "version": "22.0 ap369219"
            },
            {
              "status": "affected",
              "version": "22.0 ap369227"
            },
            {
              "status": "affected",
              "version": "22.0 ap368422"
            },
            {
              "status": "affected",
              "version": "22.0 ap369881"
            },
            {
              "status": "affected",
              "version": "22.0 ap369550"
            },
            {
              "status": "affected",
              "version": "22.0 ap369668"
            },
            {
              "status": "affected",
              "version": "22.0 ap369571"
            },
            {
              "status": "affected",
              "version": "22.0 ap372433"
            },
            {
              "status": "affected",
              "version": "22.0 ap370654"
            },
            {
              "status": "affected",
              "version": "22.0 ap370138"
            },
            {
              "status": "affected",
              "version": "22.0 ap370615"
            },
            {
              "status": "affected",
              "version": "22.0 ap372643"
            },
            {
              "status": "affected",
              "version": "22.0 ap372708"
            },
            {
              "status": "affected",
              "version": "22.0 ap370590"
            },
            {
              "status": "affected",
              "version": "22.0 ap372390"
            },
            {
              "status": "affected",
              "version": "22.0 ap372757"
            },
            {
              "status": "affected",
              "version": "22.0 ap370636"
            },
            {
              "status": "affected",
              "version": "22.0 ap372750"
            },
            {
              "status": "affected",
              "version": "22.0 ap372706"
            },
            {
              "status": "affected",
              "version": "22.0 ap370269"
            },
            {
              "status": "affected",
              "version": "22.0 ap370180"
            },
            {
              "status": "affected",
              "version": "22.0 ap370675"
            },
            {
              "status": "affected",
              "version": "22.0 ap370737"
            },
            {
              "status": "affected",
              "version": "22.0 ap370424"
            },
            {
              "status": "affected",
              "version": "22.0 ap370544"
            },
            {
              "status": "affected",
              "version": "22.0 ap374339"
            },
            {
              "status": "affected",
              "version": "22.0 ap370459"
            },
            {
              "status": "affected",
              "version": "22.0 ap370545"
            },
            {
              "status": "affected",
              "version": "22.0 ap370389"
            },
            {
              "status": "affected",
              "version": "22.0 ap374803"
            },
            {
              "status": "affected",
              "version": "22.0 ap370358"
            },
            {
              "status": "affected",
              "version": "22.0 ap373539"
            },
            {
              "status": "affected",
              "version": "22.0 ap373118"
            },
            {
              "status": "affected",
              "version": "22.0 ap373855"
            },
            {
              "status": "affected",
              "version": "22.0 ap373820"
            },
            {
              "status": "affected",
              "version": "22.0 ap373438"
            },
            {
              "status": "affected",
              "version": "22.0 ap374660"
            },
            {
              "status": "affected",
              "version": "22.0 ap373018"
            },
            {
              "status": "affected",
              "version": "22.0 ap373954"
            },
            {
              "status": "affected",
              "version": "22.0 ap374230"
            },
            {
              "status": "affected",
              "version": "22.0 ap374330"
            },
            {
              "status": "affected",
              "version": "22.0 ap374460"
            },
            {
              "status": "affected",
              "version": "22.0 ap372956"
            },
            {
              "status": "affected",
              "version": "22.0 ap373111"
            },
            {
              "status": "affected",
              "version": "22.0 ap374114"
            },
            {
              "status": "affected",
              "version": "22.0 ap373122"
            },
            {
              "status": "affected",
              "version": "22.0 ap373108"
            },
            {
              "status": "affected",
              "version": "22.0 ap374356"
            },
            {
              "status": "affected",
              "version": "22.0 ap375069"
            },
            {
              "status": "affected",
              "version": "22.0 ap373899"
            },
            {
              "status": "affected",
              "version": "22.0 ap374971"
            },
            {
              "status": "affected",
              "version": "22.0 ap375862"
            },
            {
              "status": "affected",
              "version": "22.0 ap375354"
            },
            {
              "status": "affected",
              "version": "22.0 ap375688"
            },
            {
              "status": "affected",
              "version": "22.0 ap373046"
            },
            {
              "status": "affected",
              "version": "22.0 ap373452"
            },
            {
              "status": "affected",
              "version": "22.0 ap374334"
            },
            {
              "status": "affected",
              "version": "22.0 ap374428"
            },
            {
              "status": "affected",
              "version": "22.0 ap374596"
            },
            {
              "status": "affected",
              "version": "22.0 ap372963"
            },
            {
              "status": "affected",
              "version": "22.0 ap376041"
            },
            {
              "status": "affected",
              "version": "22.0 ap376410"
            },
            {
              "status": "affected",
              "version": "22.0 ap376298"
            },
            {
              "status": "affected",
              "version": "22.0 ap372799"
            },
            {
              "status": "affected",
              "version": "22.0 ap376181"
            },
            {
              "status": "affected",
              "version": "22.0 ap375090"
            },
            {
              "status": "affected",
              "version": "22.0 ap376416"
            },
            {
              "status": "affected",
              "version": "22.0 ap373098"
            },
            {
              "status": "affected",
              "version": "22.0 ap375937"
            },
            {
              "status": "affected",
              "version": "22.0 ap376531"
            },
            {
              "status": "affected",
              "version": "22.0 ap375465"
            },
            {
              "status": "affected",
              "version": "22.0 ap376100"
            },
            {
              "status": "affected",
              "version": "22.0 ap375634"
            },
            {
              "status": "affected",
              "version": "22.0 ap375091"
            },
            {
              "status": "affected",
              "version": "22.0 ap375018"
            },
            {
              "status": "affected",
              "version": "22.0 ap375743"
            },
            {
              "status": "affected",
              "version": "22.0 ap375383"
            },
            {
              "status": "affected",
              "version": "22.0 ap375719"
            },
            {
              "status": "affected",
              "version": "22.0 ap376614"
            },
            {
              "status": "affected",
              "version": "22.0 ap376541"
            },
            {
              "status": "affected",
              "version": "22.0 ap375685"
            },
            {
              "status": "affected",
              "version": "22.0 ap374895"
            },
            {
              "status": "affected",
              "version": "22.0 ap376429"
            },
            {
              "status": "affected",
              "version": "22.0 ap379838"
            },
            {
              "status": "affected",
              "version": "22.0 ap380187"
            },
            {
              "status": "affected",
              "version": "22.0 ap380143"
            },
            {
              "status": "affected",
              "version": "22.0 ap379972"
            },
            {
              "status": "affected",
              "version": "22.0 ap380535"
            },
            {
              "status": "affected",
              "version": "22.0 ap380117"
            },
            {
              "status": "affected",
              "version": "22.0 ap380473"
            },
            {
              "status": "affected",
              "version": "22.0 ap375924"
            },
            {
              "status": "affected",
              "version": "22.0 ap379833"
            },
            {
              "status": "affected",
              "version": "22.0 ap376661"
            },
            {
              "status": "affected",
              "version": "22.0 ap380041"
            },
            {
              "status": "affected",
              "version": "22.0 ap380391"
            },
            {
              "status": "affected",
              "version": "22.0 ap379795"
            },
            {
              "status": "affected",
              "version": "22.0 ap376701"
            },
            {
              "status": "affected",
              "version": "22.0 ap376668"
            },
            {
              "status": "affected",
              "version": "22.0 ap377384"
            },
            {
              "status": "affected",
              "version": "22.0 ap377480"
            },
            {
              "status": "affected",
              "version": "22.0 ap377581"
            },
            {
              "status": "affected",
              "version": "22.0 ap376652"
            },
            {
              "status": "affected",
              "version": "22.0 ap376620"
            },
            {
              "status": "affected",
              "version": "22.0 ap378405"
            },
            {
              "status": "affected",
              "version": "22.0 ap377494"
            },
            {
              "status": "affected",
              "version": "22.0 ap378440"
            },
            {
              "status": "affected",
              "version": "22.0 ap378581"
            },
            {
              "status": "affected",
              "version": "22.0 ap377307"
            },
            {
              "status": "affected",
              "version": "22.0 ap377566"
            },
            {
              "status": "affected",
              "version": "22.0 ap378585"
            },
            {
              "status": "affected",
              "version": "22.0 ap377149"
            },
            {
              "status": "affected",
              "version": "22.0 ap378471"
            },
            {
              "status": "affected",
              "version": "22.0 ap377412"
            },
            {
              "status": "affected",
              "version": "22.0 ap377068"
            },
            {
              "status": "affected",
              "version": "22.0 ap377757"
            },
            {
              "status": "affected",
              "version": "22.0 ap378332"
            },
            {
              "status": "affected",
              "version": "22.0 ap379016"
            },
            {
              "status": "affected",
              "version": "22.0 ap378866"
            },
            {
              "status": "affected",
              "version": "22.0 ap378079"
            },
            {
              "status": "affected",
              "version": "22.0 ap378509"
            },
            {
              "status": "affected",
              "version": "22.0 ap378953"
            },
            {
              "status": "affected",
              "version": "22.0 ap377779"
            },
            {
              "status": "affected",
              "version": "22.0 ap379008"
            },
            {
              "status": "affected",
              "version": "22.0 ap379694"
            },
            {
              "status": "affected",
              "version": "22.0 ap379597"
            },
            {
              "status": "affected",
              "version": "22.0 ap378882"
            },
            {
              "status": "affected",
              "version": "22.0 ap379389"
            },
            {
              "status": "affected",
              "version": "22.0 ap379487"
            },
            {
              "status": "affected",
              "version": "22.0 ap379374"
            },
            {
              "status": "affected",
              "version": "22.0 ap380771"
            },
            {
              "status": "affected",
              "version": "22.0 ap381594"
            },
            {
              "status": "affected",
              "version": "22.0 ap381243"
            },
            {
              "status": "affected",
              "version": "22.0 ap380629"
            },
            {
              "status": "affected",
              "version": "22.0 ap380751"
            },
            {
              "status": "affected",
              "version": "22.0 ap382158"
            },
            {
              "status": "affected",
              "version": "22.0 ap378999"
            },
            {
              "status": "affected",
              "version": "22.0 ap381136"
            },
            {
              "status": "affected",
              "version": "22.0 ap382240"
            },
            {
              "status": "affected",
              "version": "22.0 ap382362"
            },
            {
              "status": "affected",
              "version": "22.0 ap382192"
            },
            {
              "status": "affected",
              "version": "22.0 ap381091"
            },
            {
              "status": "affected",
              "version": "22.0 ap382251"
            },
            {
              "status": "affected",
              "version": "22.0 ap381732"
            },
            {
              "status": "affected",
              "version": "22.0 ap381584"
            },
            {
              "status": "affected",
              "version": "22.0 ap381118"
            },
            {
              "status": "affected",
              "version": "22.0 ap382717"
            },
            {
              "status": "affected",
              "version": "22.0 ap383569"
            },
            {
              "status": "affected",
              "version": "22.0 ap382487"
            },
            {
              "status": "affected",
              "version": "22.0 ap383002"
            },
            {
              "status": "affected",
              "version": "22.0 ap382434"
            },
            {
              "status": "affected",
              "version": "22.0 ap383170"
            },
            {
              "status": "affected",
              "version": "22.0 ap383309"
            },
            {
              "status": "affected",
              "version": "22.0 ap383514"
            },
            {
              "status": "affected",
              "version": "22.0 ap383710"
            },
            {
              "status": "affected",
              "version": "22.0 ap382977"
            },
            {
              "status": "affected",
              "version": "22.0 ap382488"
            },
            {
              "status": "affected",
              "version": "22.0 ap383134"
            },
            {
              "status": "affected",
              "version": "22.0 ap359429"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351795"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap348143"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351216"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap339376"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap358132"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap355717"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap346074"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap373102"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap235252"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap242300"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap338964"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap339196"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap341645"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap341897"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap342461"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap342625"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap342755"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap342853"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap343352"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap344270"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap344479"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap344681"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap345054"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap345293"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap345755"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap348472"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap349222"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap350050"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap350189"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351248"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351295"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351530"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351754"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351898"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap352082"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap352205"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap352972"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap353418"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap353841"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap354707"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap356271"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap356787"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap357574"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap358730"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap360211"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap360306"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap361420"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap365379"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap365390"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap366348"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap374822"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap375026"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap375053"
            },
            {
              "status": "affected",
              "version": "21.0 ap349066"
            },
            {
              "status": "affected",
              "version": "21.0 ap364358"
            },
            {
              "status": "affected",
              "version": "21.0 ap362637"
            },
            {
              "status": "affected",
              "version": "21.0 ap342145"
            },
            {
              "status": "affected",
              "version": "21.0 ap357571"
            },
            {
              "status": "affected",
              "version": "21.0 ap362825"
            },
            {
              "status": "affected",
              "version": "21.0 ap361559"
            },
            {
              "status": "affected",
              "version": "21.0 ap339395"
            },
            {
              "status": "affected",
              "version": "21.0 ap348945"
            },
            {
              "status": "affected",
              "version": "21.0 ap346902"
            },
            {
              "status": "affected",
              "version": "21.0 ap350308"
            },
            {
              "status": "affected",
              "version": "21.0 ap363301"
            },
            {
              "status": "affected",
              "version": "21.0 ap349850"
            },
            {
              "status": "affected",
              "version": "21.0 ap344752"
            },
            {
              "status": "affected",
              "version": "21.0 ap347640"
            },
            {
              "status": "affected",
              "version": "21.0 ap350111"
            },
            {
              "status": "affected",
              "version": "21.0 ap355616"
            },
            {
              "status": "affected",
              "version": "21.0 ap353841"
            },
            {
              "status": "affected",
              "version": "21.0 ap346128"
            },
            {
              "status": "affected",
              "version": "21.0 ap350204"
            },
            {
              "status": "affected",
              "version": "21.0 ap341897"
            },
            {
              "status": "affected",
              "version": "21.0 ap347064"
            },
            {
              "status": "affected",
              "version": "21.0 ap350032"
            },
            {
              "status": "affected",
              "version": "21.0 ap351261"
            },
            {
              "status": "affected",
              "version": "21.0 ap352182"
            },
            {
              "status": "affected",
              "version": "21.0 ap350760"
            },
            {
              "status": "affected",
              "version": "21.0 ap363408"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap340545"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap341683"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap341909"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap342214"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap344301"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap344783"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap346270"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap346351"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap347928"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap349517"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap349090"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351315"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap352304"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap351738"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap354194"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap357347"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap364778"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap372422"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap371281"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap370908"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap379493"
            },
            {
              "status": "affected",
              "version": "21.sp1 ap380506"
            },
            {
              "status": "affected",
              "version": "21.sp9 ap360116"
            },
            {
              "status": "affected",
              "version": "21.sp9 ap367207"
            },
            {
              "status": "affected",
              "version": "RI.2021.02"
            },
            {
              "status": "affected",
              "version": "RI.2021.08"
            },
            {
              "status": "affected",
              "version": "RI.2021.09"
            },
            {
              "status": "affected",
              "version": "RI.2021.10"
            },
            {
              "status": "affected",
              "version": "RI.2021.11"
            },
            {
              "status": "affected",
              "version": "RI.2021.12"
            },
            {
              "status": "affected",
              "version": "RI.2022.02"
            },
            {
              "status": "affected",
              "version": "RI.2022.03"
            },
            {
              "status": "affected",
              "version": "RI.2022.04"
            },
            {
              "status": "affected",
              "version": "RI.2022.07"
            },
            {
              "status": "affected",
              "version": "RI.2022.06"
            },
            {
              "status": "affected",
              "version": "RI.2022.05"
            },
            {
              "status": "affected",
              "version": "RI.2022.08"
            },
            {
              "status": "affected",
              "version": "RI.2022.09"
            },
            {
              "status": "affected",
              "version": "RI.2022.10"
            },
            {
              "status": "affected",
              "version": "RI.2022.12"
            },
            {
              "status": "affected",
              "version": "RI.2023.01"
            },
            {
              "status": "affected",
              "version": "RI.2023.03"
            },
            {
              "status": "affected",
              "version": "RI.2023.02"
            },
            {
              "status": "affected",
              "version": "RI.2023.04"
            },
            {
              "status": "affected",
              "version": "RI.2023.05"
            },
            {
              "status": "affected",
              "version": "RI.2023.07"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system.\r\n\r This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "Improper Authentication",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-25T16:58:28.743Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-bw-auth-bypass-kCggMWhX",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX"
        }
      ],
      "source": {
        "advisory": "cisco-sa-bw-auth-bypass-kCggMWhX",
        "defects": [
          "CSCwh02758"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2023-20238",
    "datePublished": "2023-09-06T17:08:28.178Z",
    "dateReserved": "2022-10-27T18:47:50.370Z",
    "dateUpdated": "2024-10-23T19:41:58.912Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-20238\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2023-09-06T18:15:08.043\",\"lastModified\":\"2024-01-25T17:15:40.067\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system.\\r\\n\\r This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials. A successful exploit could allow the attacker to commit toll fraud or to execute commands at the privilege level of the forged account. If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users. To exploit this vulnerability, the attacker would need a valid user ID that is associated with an affected Cisco BroadWorks system.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la implementaci\u00f3n del inicio de sesi\u00f3n \u00fanico (SSO) de Cisco BroadWorks Application Delivery Platform y Cisco BroadWorks Xtended Services Platform podr\u00eda permitir que un atacante remoto no autenticado falsifique las credenciales necesarias para acceder a un sistema afectado. Esta vulnerabilidad se debe al m\u00e9todo utilizado para validar los tokens de SSO. Un atacante podr\u00eda aprovechar esta vulnerabilidad autentic\u00e1ndose en la aplicaci\u00f3n con credenciales falsificadas. Un exploit exitoso podr\u00eda permitir al atacante cometer fraude telef\u00f3nico o ejecutar comandos en el nivel de privilegio de la cuenta falsificada. Si esa cuenta es una cuenta de administrador, el atacante tendr\u00eda la capacidad de ver informaci\u00f3n confidencial, modificar la configuraci\u00f3n del cliente o modificar la configuraci\u00f3n de otros usuarios. Para aprovechar esta vulnerabilidad, el atacante necesitar\u00eda una identificaci\u00f3n de usuario v\u00e1lida asociada con un sistema Cisco BroadWorks afectado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:broadworks_application_delivery_platform:ri.2023.06:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95D3C201-88EC-44F7-8ED2-6CFD726FAC73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:broadworks_application_delivery_platform:ri.2023.07:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94C37251-4CAB-499E-AFD0-4AAD78288A51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:broadworks_xtended_services_platform:*:*:*:*:-:*:*:*\",\"versionEndExcluding\":\"23.0.1075.ap384245\",\"matchCriteriaId\":\"3DA39D01-BCC5-4B5E-A146-5CAEA4F9ED70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:broadworks_xtended_services_platform:2023.06:*:*:*:release_independent:*:*:*\",\"matchCriteriaId\":\"FAA6AF4C-2CBF-4F59-B5DE-809CFE82DD6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:broadworks_xtended_services_platform:2023.07:*:*:*:release_independent:*:*:*\",\"matchCriteriaId\":\"07A9E1FF-7458-4035-AF12-056585F7DC6D\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-auth-bypass-kCggMWhX\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading...

Loading...

Loading...

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.