CVE-2020-3281
High
Description
A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Cisco Digital Network Architecture Center
PublishedJun 3, 2020
First seenJun 3, 2020
Weakness typeCWE-532CWE-532
How to fix
Update
- cisco digital_network_architecture_center1.3.3.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco digital_network_architecture_center | v < 1.3.3.3 | 1.3.3.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.