Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-1283

Опубликовано: 20 янв. 2021
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*
Версия до 11.5\(1\) (исключая)

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-789

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials.

CVSS3: 5.5
fstec
около 5 лет назад

Уязвимость подсистемы логирования сетевого управления центром обработки данных Cisco Data Center Network Manager (DCNM), позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 19%
0.00061
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-789