CVE-2021-1283

Medium

Description

A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials.

SeverityMedium
CVSS5.5
Exploit probability—
ProductCisco Data Center Network Manager
PublishedJan 20, 2021
First seenJan 20, 2021
Weakness typeCWE-789CWE-789

How to fix

Update
  • cisco data_center_network_manager11.5\(1\) or later

Affected products

ProductAffected versionsFixed in
cisco data_center_network_managerv < 11.5\(1\)11.5\(1\)

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.