CVE-2018-0368: Infoleak

Published Jul 16, 2018

Updated

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient security restrictions imposed by the affected software. An attacker could exploit this vulnerability by accessing unprotected log files. A successful exploit could allow the attacker to access sensitive log files, which may include system credentials, on the affected device. Cisco Bug IDs: CSCvi22400.

Affected Software

1 affected component

Cisco Application Policy Infrastructure Controller Enterprise Module=1.1_base

Event History

Jul 16, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0368?

CVE-2018-0368 is rated as a medium severity vulnerability.

How do I fix CVE-2018-0368?

To fix CVE-2018-0368, update the affected Cisco Digital Network Architecture (DNA) Center to the latest software version recommended by Cisco.

Who is affected by CVE-2018-0368?

CVE-2018-0368 affects systems running Cisco Digital Network Architecture (DNA) Center with insufficient security restrictions.

What type of attack can exploit CVE-2018-0368?

CVE-2018-0368 can be exploited by an authenticated, local attacker to access sensitive information.

What causes the vulnerability CVE-2018-0368?

The vulnerability CVE-2018-0368 is caused by insufficient security restrictions imposed by the affected software.