Логотип exploitDog
bind:CVE-2024-20440
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20440

Количество 3

Количество 3

nvd логотип

CVE-2024-20440

больше 1 года назад

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVSS3: 7.5
EPSS: Высокий
github логотип

GHSA-g9j7-w55p-jq3w

больше 1 года назад

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVSS3: 7.5
EPSS: Высокий
fstec логотип

BDU:2024-06720

больше 1 года назад

Уязвимость программного обеспечения управления лицензиями Cisco Smart License Utility, связанная с раскрытием информации через регистрационные файлы, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации и получить несанкционированный доступ к API

CVSS3: 9.8
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20440

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVSS3: 7.5
77%
Высокий
больше 1 года назад
github логотип
GHSA-g9j7-w55p-jq3w

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

CVSS3: 7.5
77%
Высокий
больше 1 года назад
fstec логотип
BDU:2024-06720

Уязвимость программного обеспечения управления лицензиями Cisco Smart License Utility, связанная с раскрытием информации через регистрационные файлы, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации и получить несанкционированный доступ к API

CVSS3: 9.8
77%
Высокий
больше 1 года назад

Уязвимостей на страницу