CVE-2021-34707: Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability
First published: Wed Aug 04 2021(Updated: )
A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Evolved Programmable Network Manager | <=5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-34707?
CVE-2021-34707 is a vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) that could allow an authenticated, remote attacker to access sensitive data on an affected system.
How does CVE-2021-34707 impact Cisco Evolved Programmable Network Manager?
CVE-2021-34707 allows an attacker to access sensitive data on an affected system through the REST API of Cisco EPNM.
What is the severity of CVE-2021-34707?
CVE-2021-34707 has a severity rating of 6.5 (medium).
How can an authenticated, remote attacker exploit CVE-2021-34707?
An authenticated, remote attacker can exploit CVE-2021-34707 by sending specially crafted requests to the REST API of Cisco EPNM in order to access sensitive data.
Is there a fix available for CVE-2021-34707?
Cisco has released a security advisory with remediation steps to address CVE-2021-34707. Please refer to the Cisco Security Advisory linked in the references for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/title
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/cisco
- canonical/cisco evolved programmable network manager
- version/cisco evolved programmable network manager/5.0