# Cisco Vision Dynamic Signage Director REST API endpoint allows authentication bypass

- Date: 2020-09-23
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2019-16004

NVD published an authentication bypass vulnerability in Cisco Vision Dynamic Signage Director. A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device.

## Sources

- [CVE-2019-16004](https://nvd.nist.gov/vuln/detail/CVE-2019-16004) (NIST NVD)
- [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-vdsd-auth-bypass](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200108-vdsd-auth-bypass)

Page: https://signagelist.org/incidents/2020-09-cisco-vision-dynamic-signage-director-rest-api/