Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9j7-w55p-jq3w

Опубликовано: 04 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.

This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.

This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

EPSS

Процентиль: 99%
0.77265
Высокий

7.5 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость программного обеспечения управления лицензиями Cisco Smart License Utility, связанная с раскрытием информации через регистрационные файлы, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации и получить несанкционированный доступ к API

EPSS

Процентиль: 99%
0.77265
Высокий

7.5 High

CVSS3

Дефекты

CWE-532