CVE-2021-1515

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with access to a device that is managed in the multi-tenant environment could exploit this vulnerability by sending a request to an affected API endpoint on the vManage system. A successful exploit could allow the attacker to gain access to sensitive information that may include hashed credentials that could be used in future attacks.

• CWE-284

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-9VZO4gfUVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-9VZO4gfUVendor Advisory

Published

May 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1509Multiple vulnerabilities in Cisco SD-WAN vEdge Software coul…7.5
• CVE-2021-1510Multiple vulnerabilities in Cisco SD-WAN vEdge Software coul…7.5
• CVE-2021-1511Multiple vulnerabilities in Cisco SD-WAN vEdge Software coul…6.5
• CVE-2021-1512A vulnerability in the CLI of Cisco SD-WAN Software could al…6
• CVE-2021-1513A vulnerability in the vDaemon process of Cisco SD-WAN Softw…7.5
• CVE-2021-1514A vulnerability in the CLI of Cisco SD-WAN Software could al…7.8
• CVE-2021-1516A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1517A vulnerability in the multimedia viewer feature of Cisco We…4.3
• CVE-2021-1518A vulnerability in the REST API of Cisco Firepower Device Ma…8.8
• CVE-2021-1519A vulnerability in the interprocess communication (IPC) chan…5.5
• CVE-2021-1520A vulnerability in the internal message processing of Cisco …6.7
• CVE-2021-1521A vulnerability in the Cisco Discovery Protocol implementati…6.5