CVE-2019-1622: Cisco Data Center Network Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1622?
CVE-2019-1622 is classified as a high severity vulnerability.
How do I fix CVE-2019-1622?
To mitigate CVE-2019-1622, update Cisco Data Center Network Manager to the latest version that addresses this vulnerability.
What type of attack does CVE-2019-1622 allow?
CVE-2019-1622 allows an unauthenticated, remote attacker to retrieve sensitive information from affected devices.
Which versions of Cisco Data Center Network Manager are affected by CVE-2019-1622?
CVE-2019-1622 specifically affects Cisco Data Center Network Manager version 11.0(1).
What are the potential consequences of CVE-2019-1622?
The potential consequences of CVE-2019-1622 include unauthorized access to sensitive information, compromising security and privacy.