VYPR
← All advisories
Critical severity10.0NVD Advisory· Published May 10, 2019· Updated Jun 17, 2026

CVE-2019-1867

CVE-2019-1867

Description

A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST API. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by sending a crafted request to the REST API. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on an affected system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cisco Systems, Inc./Elastic Services Controller3 versions
    cpe:2.3:a:cisco:elastic_services_controller:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:elastic_services_controller:*:*:*:*:*:*:*:*range: >=4.1,<4.5
    • (no CPE)
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.