CVE-2021-1537CWE-522

Cisco ThousandEyes Recorder Information Disclosure Vulnerability

Medium · published June 4, 2021

CVSS v3.1
6.2
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the application installer. An attacker could exploit this vulnerability by downloading the installer and extracting its contents. A successful exploit could allow the attacker to access sensitive information that is included in the application installer.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-06-04T16:45Z
EPSS history
Timeline
  • 04 JUN 16:45Z
    Cisco ThousandEyes Recorder Information Disclosure Vulnerability
    cvelistv5