Data Center Network Manager
CVE-2021-1283
MEDIUM
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials.
AnalysisAI
A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-789. A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials. Affected products include: Cisco Data Center Network Manager.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Data Center Network Manager
View allA vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthe
A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attac
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthentic
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject ar
Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authen
A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthentic
A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remot
A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today