Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVE-2022-20939)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability - Vulnerability ID: cisco-sa-cssm-priv-esc-SEjz69dv - CVE Number: CVE-2022-20939 - CVSS Score: Base 4.3 2. Affected Products: - Affected Product: Cisco Smart Software Manager On-Prem - Products Confirmed Not Affected: Cisco Smart Software Manager Satellite 3. Vulnerability Impact: - Description: Due to insufficient protection of sensitive user information, attackers can exploit this vulnerability by accessing certain logs on the affected system. Successful exploitation allows attackers to escalate privileges to system administrator level. 4. Remediation: - Fix Released: Cisco has released software updates to address this vulnerability. There is no workaround available for this vulnerability. 5. Affected Software Versions: - Affected Versions: All versions prior to 8-202206 6. Security Policy: - Security Policy Link: Cisco Security Vulnerability Policy 7. Rating and Feedback: - Rating: Users can rate the vulnerability; currently, no ratings have been submitted. - Feedback: Users can provide additional feedback. 8. Source: - Source Link: Vulnerability Details Page 9. Legal Disclaimer: - Disclaimer: This document is provided "AS IS" without warranty of any kind, including without limitation any warranty of merchantability or fitness for a particular purpose. The use of this document or any materials linked to it is at the user's own risk. Cisco reserves the right to modify or update this document at any time. This information helps users understand the details of the vulnerability, affected products, remediation steps, and how to obtain further information.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVE-2022-20939)