Cisco Security Advisory - Cisco AppDynamics Controller Authorization Bypass Vulnerability

[Netwörkheäd]

Cisco AppDynamics Controller Authorization Bypass Vulnerability

<p>A vulnerability in the web-based management interface of Cisco&nbsp;AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access.</p>
<p>This vulnerability is due to improper authorization checking for HTTP requests that are submitted to the affected web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected instance of AppDynamics Controller. A successful exploit could allow the attacker to access the login page for an administrative console.</p>
<p>AppDynamics has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p>
<p>This advisory is available at the following link:<br><a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-contrl-athzn-bp-BLypgsbu">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-contrl-athzn-bp-BLypgsbu</a></p>

     
         
Security Impact Rating:  Medium
   
   
       
CVE: CVE-2022-20736
Source: Cisco AppDynamics Controller Authorization Bypass Vulnerability