CVE-2023-20254

CVE-2023-20254 is a high-severity vulnerability affecting the multi-tenant feature of Cisco Catalyst SD-WAN Manager, stemming from insufficient user session management. An authenticated, remote attacker could exploit this to gain unauthorized access to other tenants, potentially leading to information disclosure, configuration changes, or denial of service. With a CVSS score of 8.8, exploitation is relatively easy, requiring only low privileges and no user interaction. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity community.