CVE-2018-15433: Cisco Prime Infrastructure Information Disclosure Vulnerability

Published Oct 5, 2018

Updated

A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. A successful exploit could allow the attacker to view sensitive information.

Affected Software

1 affected component

cisco Prime Infrastructure=3.2

Event History

Oct 5, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this Cisco Prime Infrastructure vulnerability?

The vulnerability ID for this Cisco Prime Infrastructure vulnerability is CVE-2018-15433.

What is the severity level of CVE-2018-15433?

The severity level of CVE-2018-15433 is medium.

How does CVE-2018-15433 affect Cisco Prime Infrastructure?

CVE-2018-15433 allows an authenticated, remote attacker to view sensitive information in Cisco Prime Infrastructure.

How can an attacker exploit CVE-2018-15433?

An attacker can exploit CVE-2018-15433 by sending a GET request to the vulnerable server backup function.

Where can I find more information about CVE-2018-15433?

More information about CVE-2018-15433 can be found at the following references: [http://www.securityfocus.com/bid/105562](http://www.securityfocus.com/bid/105562) and [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-prime-id](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-prime-id).