What is CVE-2019-1807?

CVE-2019-1807 is a high-severity vulnerability in Cisco Umbrella, classified under Session Fixation. CVSS score: 7.6/10. Published 2019-05-03.

How severe is CVE-2019-1807?

High severity. CVSS v3 base score is 7.6 out of 10.

Vulnerability in Cisco Umbrella

CVE-2019-1807

A vulnerability in the session management functionality of the web UI for the Cisco Umbrella Dashboard could allow an authenticated, remote attacker to access the Dashboard via an active, user session. The vulnerability exists due to the a…

EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L.

Affected products

Cisco Umbrella — versions unspecified
Cisco Umbrella

Weakness classification (CWE)

CWE-384 — Session Fixation

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-1807?: CVE-2019-1807 is a high-severity vulnerability in Cisco Umbrella, classified under Session Fixation. CVSS score: 7.6/10. Published 2019-05-03.
How severe is CVE-2019-1807?: High severity. CVSS v3 base score is 7.6 out of 10.