Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-34707

Опубликовано: 04 авг. 2021
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*
Версия до 5.0 (включая)

EPSS

Процентиль: 47%
0.00237
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200
CWE-200

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость интерфейса REST API программного средства управления сетевыми сервисами Cisco Evolved Programmable Network Manager, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 47%
0.00237
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200
CWE-200