Friday, December 6, 2024
HomeCiscoSSO Implementation Flaw In Cisco Broadworks Let Attackers Forge Credentials

SSO Implementation Flaw In Cisco Broadworks Let Attackers Forge Credentials

Published on

SIEM as a Service

A single sign-on (SSO) implementation flaw in the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform might make it possible for a remote, unauthenticated attacker to forge credentials to access a vulnerable system.

This “Critical” severity vulnerability has a CVSS base score of 10.0 and is tracked as CVE-2023-20238.

Cisco has issued software upgrades to address this vulnerability. There are no workarounds that address this vulnerability.

- Advertisement - SIEM as a Service

Details of the Vulnerability

Cisco stated that the process used to validate SSO tokens causes this vulnerability. By logging into the application using fake credentials, an attacker might take advantage of this vulnerability.

“This vulnerability is due to the method used to validate SSO tokens. An attacker could exploit this vulnerability by authenticating to the application with forged credentials”, Cisco said in its Security Advisory.

If the vulnerability is successful, the attacker may be able to use the forged account to execute commands or commit toll fraud. Further, the attacker would be able to read sensitive data, change customer settings, or change settings for other users if that account is an Administrator account.

“If that account is an Administrator account, the attacker would have the ability to view confidential information, modify customer settings, or modify settings for other users,” Cisco said.

The attacker would require a legitimate user ID linked to an affected Cisco BroadWorks system to take advantage of this flaw.

Affected Products

If you are running a vulnerable release of Cisco BroadWorks and have enabled one of the following applications, you are vulnerable to this issue.

  • AuthenticationService
  • BWCallCenter
  • BWReceptionist
  • CustomMediaFilesRetrieval
  • ModeratorClientApp
  • PublicECLQuery
  • PublicReporting
  • UCAPI
  • Xsi-Actions
  • Xsi-Events
  • Xsi-MMTel
  • Xsi-VTR

Products Unaffected

  • BroadWorks Ansible Playbook
  • BroadWorks Database Server
  • BroadWorks Database Troubleshooting Server
  • BroadWorks Execution Server
  • BroadWorks Media Server
  • BroadWorks Messaging Server
  • BroadWorks Network Database Server
  • BroadWorks Network Function Manager
  • BroadWorks Network Server
  • BroadWorks Pre-Install Check
  • BroadWorks Profile Server
  • BroadWorks Service Control Function Server
  • BroadWorks Service License Report Tool
  • BroadWorks Sharing Server
  • BroadWorks Software Manager
  • BroadWorks Video Server
  • BroadWorks WebRTC Server

Fixes Available

Cisco has made free software upgrades available to fix this issue.

Customers are encouraged to upgrade to an applicable fixed software release as soon as feasible.

Keep informed about the latest Cyber Security News by following us on Google NewsLinkedinTwitter, and Facebook.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Top Five Industries Most Frequently Targeted by Phishing Attacks

Researchers analyzed phishing attacks from Q3 2023 to Q3 2024 and identified the top...

Russian BlueAlpha APT Exploits Cloudflare Tunnels to Distribute Custom Malware

BlueAlpha, a Russian state-sponsored group, is actively targeting Ukrainian individuals and organizations by using...

Russian Hackers Hijacked Pakistani Actor Servers For C2 Communication

Secret Blizzard, a Russian threat actor, has infiltrated 33 command-and-control (C2) servers belonging to...

Sophisticated Celestial Stealer Targets Browsers to Steal Login Credentials

Researchers discovered Celestial Stealer, a JavaScript-based MaaS infostealer targeting Windows systems that, evading detection...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

Top Five Industries Most Frequently Targeted by Phishing Attacks

Researchers analyzed phishing attacks from Q3 2023 to Q3 2024 and identified the top...

Russian BlueAlpha APT Exploits Cloudflare Tunnels to Distribute Custom Malware

BlueAlpha, a Russian state-sponsored group, is actively targeting Ukrainian individuals and organizations by using...

Russian Hackers Hijacked Pakistani Actor Servers For C2 Communication

Secret Blizzard, a Russian threat actor, has infiltrated 33 command-and-control (C2) servers belonging to...