CVE-2024-20405

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:finesse::::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):-::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):es4::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):es5::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):es6::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):es7::::::
	cpe:2.3:a:cisco:finesse:11.6\(1\):es8::::::
	cpe:2.3:a:cisco:finesse:12.6\(2\):-::::::
	cpe:2.3:a:cisco:finesse:12.6\(2\):es01::::::
	cpe:2.3:a:cisco:finesse:12.6\(2\):es02::::::

History

No history.

Information

Published : 2024-06-05 17:15

Updated : 2024-06-18 18:04

NVD link : CVE-2024-20405

Mitre link : CVE-2024-20405

CVE.ORG link : CVE-2024-20405

JSON object : View

Products Affected

cisco

finesse

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-20

Improper Input Validation

{"id": "CVE-2024-20405", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.7}]}, "published": "2024-06-05T17:15:12.107", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-rfi-Um7wT8Ew", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. \r\n\r This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco Finesse podr\u00eda permitir que un atacante remoto no autenticado lleve a cabo un ataque XSS almacenado explotando una vulnerabilidad RFI. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario para solicitudes HTTP espec\u00edficas que se env\u00edan a un dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad persuadiendo a un usuario para que haga clic en un enlace manipulado. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo de script arbitrario en el contexto de la interfaz afectada o acceder a informaci\u00f3n confidencial en el dispositivo afectado."}], "lastModified": "2024-06-18T18:04:04.497", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E2816BE-3DC9-4248-90EF-AB5E2AF3CB49", "versionEndExcluding": "11.6\\(1\\)"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E507E31-71FA-437D-B325-48281650CFBA"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):es4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D917999F-E9AF-40C2-969A-36C8D5934590"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):es5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83BC183B-4CB6-47FB-9AAA-78E5E75BEB3D"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):es6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93E2DBF0-FAF3-40A7-8BA4-9A56CD6D8939"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):es7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A071AD17-9134-43D0-A3C3-FF7348AA0DE4"}, {"criteria": "cpe:2.3:a:cisco:finesse:11.6\\(1\\):es8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EBC41A8-BE9B-4F19-A287-52A9DFEF2162"}, {"criteria": "cpe:2.3:a:cisco:finesse:12.6\\(2\\):-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C98A1AA-4F49-4DD8-B4F4-6194E487BBE9"}, {"criteria": "cpe:2.3:a:cisco:finesse:12.6\\(2\\):es01:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCCF715C-5DDF-4586-AF7B-C2C3579F6041"}, {"criteria": "cpe:2.3:a:cisco:finesse:12.6\\(2\\):es02:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C21D0F8-E157-4094-98BF-0CCCE0505CA3"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}