CVE-2019-1622: Cisco Data Center Network Manager Information Disclosure Vulnerability
First published: Thu Jun 27 2019(Updated: )
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Data Center Network Manager (DCNM) | =11.0\(1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2019/Jul/7
- http://www.securityfocus.com/bid/108908
- https://seclists.org/bugtraq/2019/Jul/11
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-infodiscl
Frequently Asked Questions
What is the severity of CVE-2019-1622?
CVE-2019-1622 is classified as a high severity vulnerability.
How do I fix CVE-2019-1622?
To mitigate CVE-2019-1622, update Cisco Data Center Network Manager to the latest version that addresses this vulnerability.
What type of attack does CVE-2019-1622 allow?
CVE-2019-1622 allows an unauthenticated, remote attacker to retrieve sensitive information from affected devices.
Which versions of Cisco Data Center Network Manager are affected by CVE-2019-1622?
CVE-2019-1622 specifically affects Cisco Data Center Network Manager version 11.0(1).
What are the potential consequences of CVE-2019-1622?
The potential consequences of CVE-2019-1622 include unauthorized access to sensitive information, compromising security and privacy.
- agent/references
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/title
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco prime data center network manager (dcnm)
- version/cisco prime data center network manager (dcnm)/11.0\(1\)