Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-15407

Опубликовано: 05 окт. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:hyperflex_hx_data_platform:3.0\(1a\):*:*:*:*:*:*:*

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
CWE-459

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
CWE-459