CVE-2018-0382

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected software does not properly clear previously assigned session identifiers for a user session when a user authenticates to the web-based interface. An attacker could exploit this vulnerability by using an existing session identifier to connect to the software through the web-based interface. Successful exploitation could allow the attacker to hijack an authenticated user's browser session on the system. Versions 8.1 and 8.5 are affected.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/108005Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlan-hijackVendor Advisory
• http://www.securityfocus.com/bid/108005Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlan-hijackVendor Advisory

Published

Apr 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0376A vulnerability in the Policy Builder interface of Cisco Pol…
• CVE-2018-0377A vulnerability in the Open Systems Gateway initiative (OSGi…
• CVE-2018-0378A vulnerability in the Precision Time Protocol (PTP) feature…8.6
• CVE-2018-0379Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0380Multiple vulnerabilities exist in the Cisco Webex Network Re…
• CVE-2018-0381A vulnerability in the Cisco Aironet Series Access Points (A…6.8
• CVE-2018-0383A vulnerability in the detection engine of Cisco FireSIGHT S…
• CVE-2018-0384A vulnerability in the detection engine of Cisco FireSIGHT S…
• CVE-2018-0385A vulnerability in the detection engine parsing of Security …7.5
• CVE-2018-0386A vulnerability in Cisco Unified Communications Domain Manag…
• CVE-2018-0387A vulnerability in Cisco Webex Teams (for Windows and macOS)…8.8
• CVE-2018-0388A vulnerability in the web-based interface of Cisco Wireless…4.8