CVE-2018-0260

A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and download the contents of certain web application virtual directories. The vulnerability is due to lack of proper input validation and authorization of HTTP requests. An attacker could exploit this vulnerability by sending a malicious HTTP request to the targeted application. An exploit could allow the attacker to view sensitive information that should require authentication. Cisco Bug IDs: CSCvh31272.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/103946Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-MATE1Vendor Advisory
• http://www.securityfocus.com/bid/103946Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-MATE1Vendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0254A vulnerability in the detection engine of Cisco Firepower S…5.3
• CVE-2018-0255A vulnerability in the device manager web interface of Cisco…
• CVE-2018-0256A vulnerability in the peer-to-peer message processing funct…
• CVE-2018-0257A vulnerability in Cisco IOS XE Software running on Cisco cB…
• CVE-2018-0258A vulnerability in the Cisco Prime File Upload servlet affec…
• CVE-2018-0259A vulnerability in the web-based management interface of Cis…
• CVE-2018-0262A vulnerability in Cisco Meeting Server could allow an unaut…
• CVE-2018-0263A vulnerability in Cisco Meeting Server (CMS) could allow an…7.4
• CVE-2018-0264A vulnerability in the Cisco WebEx Network Recording Player …
• CVE-2018-0265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0266A vulnerability in the web framework of Cisco Unified Commun…4.3
• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5