CVE-2020-3461CWE-306

Cisco Data Center Network Manager Information Disclosure Vulnerability

Medium · published July 31, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The vulnerability is due to missing authentication on a specific part of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface. A successful exploit could allow the attacker to read confidential information from an affected device.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2020-07-31T00:01Z
EPSS history
Timeline
  • 31 JUL 00:01Z
    Cisco Data Center Network Manager Information Disclosure Vulnerability
    cvelistv5