CVE-2022-20630CWE-200

Cisco DNA Center Information Disclosure Vulnerability

Medium · published February 10, 2022

CVSS v3.1
4.4
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-02-10T17:06Z
EPSS history
Timeline
  • 10 FEB 17:06Z
    Cisco DNA Center Information Disclosure Vulnerability
    cvelistv5