CVE-2026-20152

{"id": "CVE-2026-20152", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20152", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-15T16:47:46.764093Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Secure Web Appliance", "versions": [{"status": "affected", "version": "11.8.0-453"}, {"status": "affected", "version": "12.5.3-002"}, {"status": "affected", "version": "12.0.3-007"}, {"status": "affected", "version": "12.0.3-005"}, {"status": "affected", "version": "14.1.0-032"}, {"status": "affected", "version": "14.1.0-047"}, {"status": "affected", "version": "14.1.0-041"}, {"status": "affected", "version": "12.0.4-002"}, {"status": "affected", "version": "14.0.2-012"}, {"status": "affected", "version": "11.8.0-414"}, {"status": "affected", "version": "12.0.1-268"}, {"status": "affected", "version": "11.8.1-023"}, {"status": "affected", "version": "11.8.3-021"}, {"status": "affected", "version": "11.8.3-018"}, {"status": "affected", "version": "12.5.1-011"}, {"status": "affected", "version": "11.8.4-004"}, {"status": "affected", "version": "12.5.2-007"}, {"status": "affected", "version": "12.5.2-011"}, {"status": "affected", "version": "14.5.0-498"}, {"status": "affected", "version": "12.5.4-005"}, {"status": "affected", "version": "12.5.4-011"}, {"status": "affected", "version": "12.0.5-011"}, {"status": "affected", "version": "14.0.3-014"}, {"status": "affected", "version": "12.5.5-004"}, {"status": "affected", "version": "12.5.5-005"}, {"status": "affected", "version": "12.5.5-008"}, {"status": "affected", "version": "14.0.4-005"}, {"status": "affected", "version": "14.5.1-008"}, {"status": "affected", "version": "14.5.1-016"}, {"status": "affected", "version": "15.0.0-355"}, {"status": "affected", "version": "15.0.0-322"}, {"status": "affected", "version": "12.5.6-008"}, {"status": "affected", "version": "15.1.0-287"}, {"status": "affected", "version": "14.5.2-011"}, {"status": "affected", "version": "15.2.0-116"}, {"status": "affected", "version": "14.0.5-007"}, {"status": "affected", "version": "15.2.0-164"}, {"status": "affected", "version": "14.5.1-510"}, {"status": "affected", "version": "12.0.2-012"}, {"status": "affected", "version": "12.0.2-004"}, {"status": "affected", "version": "14.5.1-607"}, {"status": "affected", "version": "14.5.3-033"}, {"status": "affected", "version": "15.0.1-004"}, {"status": "affected", "version": "15.2.1-011"}, {"status": "affected", "version": "14.5.0-673"}, {"status": "affected", "version": "14.5.0-537"}, {"status": "affected", "version": "12.0.1-334"}, {"status": "affected", "version": "14.0.1-503"}, {"status": "affected", "version": "14.0.1-053"}, {"status": "affected", "version": "11.8.0-429"}, {"status": "affected", "version": "14.0.1-040"}, {"status": "affected", "version": "14.0.1-014"}, {"status": "affected", "version": "12.5.1-043"}, {"status": "affected", "version": "15.2.2-009"}, {"status": "affected", "version": "15.2.3-007"}, {"status": "affected", "version": "15.2.4-022"}, {"status": "affected", "version": "15.2.5-011"}, {"status": "affected", "version": "15.2.5-013"}, {"status": "affected", "version": "14.6.0-108"}], "defaultStatus": "unknown"}]}], "published": "2026-04-15T17:17:02.870", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-auth-bypass-6YZkTQhd", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-305"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements.\r\n\r\nThis vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device."}, {"lang": "es", "value": "Una vulnerabilidad en la caracter\u00edstica del servicio de autenticaci\u00f3n de Cisco AsyncOS Software para Cisco Secure Web Appliance podr\u00eda permitir a un atacante remoto no autenticado eludir los requisitos de la pol\u00edtica de autenticaci\u00f3n.\n\nEsta vulnerabilidad se debe a una validaci\u00f3n incorrecta de la entrada de autenticaci\u00f3n proporcionada por el usuario en las solicitudes HTTP. Un atacante podr\u00eda explotar esta vulnerabilidad enviando solicitudes HTTP que contienen solicitudes de autenticaci\u00f3n espec\u00edficas a un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante eludir la aplicaci\u00f3n de la pol\u00edtica en el dispositivo. No hay impacto directo en el Cisco Secure Web Appliance. Sin embargo, como resultado de explotar esta vulnerabilidad, un atacante podr\u00eda enviar solicitudes HTTP que deber\u00edan ser restringidas a trav\u00e9s del dispositivo."}], "lastModified": "2026-10-26T21:10:00.170", "sourceIdentifier": "psirt@cisco.com"}