CVE-2019-1647

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files.

• CWE-284
• CWE-284

• http://www.securityfocus.com/bid/106705Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-unaccessVendor Advisory
• http://www.securityfocus.com/bid/106705Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-sdwan-unaccessVendor Advisory

Published

Jan 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16464Adobe Acrobat and Reader versions , 2019.021.20056 and earli…9.8
• CVE-2019-16465Adobe Acrobat and Reader versions , 2019.021.20056 and earli…7.5
• CVE-2019-16466Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…6.1
• CVE-2019-16467Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…6.1
• CVE-2019-16468Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…7.5
• CVE-2019-16469Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, a…7.5
• CVE-2019-16470Adobe Acrobat Reader versions 2019.021.20056 and earlier are…7.8
• CVE-2019-16471Adobe Acrobat Reader versions 2019.021.20056 and earlier are…7.8
• CVE-2019-1648A vulnerability in the user group configuration of the Cisco…7.8
• CVE-2019-1649A vulnerability in the logic that handles access control to …6.7
• CVE-2019-1650A vulnerability in the Cisco SD-WAN Solution could allow an …8.8
• CVE-2019-16508The Imagination Technologies driver for Chrome OS before R74…7.8