What is CVE-2018-0435?

CVE-2018-0435 is a critical-severity vulnerability in Cisco Umbrella, classified under Improper Authentication. CVSS score: 9.1/10. Published 2018-10-05.

How severe is CVE-2018-0435?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Auth bypass in Cisco Umbrella

CVE-2018-0435

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for t…

Vulnerability class: Broken Authentication

EPSS: 0.011 (61.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H.

Affected products

Cisco Umbrella — versions n/a
Cisco Umbrella

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2018-0435?: CVE-2018-0435 is a critical-severity vulnerability in Cisco Umbrella, classified under Improper Authentication. CVSS score: 9.1/10. Published 2018-10-05.
How severe is CVE-2018-0435?: Critical severity. CVSS v3 base score is 9.1 out of 10.