Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7qqv-fq8c-hp7g

Опубликовано: 12 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system.

This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this vulnerability by accessing the logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to view sensitive information in clear text.

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system.

This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this vulnerability by accessing the logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to view sensitive information in clear text.

EPSS

Процентиль: 17%
0.00055
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-312
CWE-532

Связанные уязвимости

CVSS3: 4.9
nvd
больше 2 лет назад

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this vulnerability by accessing the logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to view sensitive information in clear text.

CVSS3: 4.9
fstec
больше 3 лет назад

Уязвимость журнала аудита прокси-сервера аутентификации Cisco Duo Authentication Proxy, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00055
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-312
CWE-532