Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r4xq-wcqx-7phm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

EPSS

Процентиль: 46%
0.00237
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость интерфейса REST API программного средства управления сетевыми сервисами Cisco Evolved Programmable Network Manager, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 46%
0.00237
Низкий

Дефекты

CWE-200