CVE-2018-15432: Cisco Prime Infrastructure Information Disclosure Vulnerability

Published Oct 5, 2018

Updated

A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. A successful exploit could allow the attacker to view sensitive information.

Affected Software

1 affected component

cisco Prime Infrastructure=3.2

Event History

Oct 5, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2018-15432.

What is the severity level of CVE-2018-15432?

CVE-2018-15432 has a severity level of medium with a CVSS score of 4.3.

How can an attacker exploit CVE-2018-15432?

An attacker can exploit CVE-2018-15432 by sending a malicious GET request to the server backup function of Cisco Prime Infrastructure, which allows them to view sensitive information.

Which version of Cisco Prime Infrastructure is affected by CVE-2018-15432?

Cisco Prime Infrastructure version 3.2 is affected by CVE-2018-15432.

Where can I find more information about CVE-2018-15432?

You can find more information about CVE-2018-15432 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/105563) and [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-pi-id).