====================================================================

                             CERT-Renater

                 Note d'Information No. 2019/VULN258

_____________________________________________________________________

DATE                : 02/09/2019

HARDWARE PLATFORM(S): Cisco 4000 Series Integrated Services Routers,
                    Cisco ASR 1000 Series Aggregation Services Routers,
                      Cisco Cloud Services Router 1000V Series,
                      Cisco Integrated Services Virtual Router.

OPERATING SYSTEM(S): IOS XE running Cisco REST API Container.

=====================================================================
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass
_____________________________________________________________________

Cisco REST API Container for IOS XE Software Authentication Bypass
Vulnerability

CVE-2019-12643

SIR: Critical

CVSS Score v(3.0): 10.0

URL:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-iosxe-rest-auth-bypass"]

=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================