CVE-2021-34782: Cisco DNA Center Information Disclosure Vulnerability
First published: Wed Oct 06 2021(Updated: )
A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated, remote attacker to gain access to sensitive information that should be restricted. The attacker must have valid device credentials. This vulnerability is due to improper access controls on API endpoints. An attacker could exploit the vulnerability by sending a specific API request to an affected application. A successful exploit could allow the attacker to obtain sensitive information about other users who are configured with higher privileges on the application.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco DNA Center | <2.2.2.5 | |
| Cisco DNA Center | >=2.2.3.0<2.2.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco DNA Center vulnerability?
The vulnerability ID for this Cisco DNA Center vulnerability is CVE-2021-34782.
What is the severity of CVE-2021-34782?
CVE-2021-34782 has a severity rating of 4.3, which is classified as medium.
How can an attacker exploit CVE-2021-34782?
An attacker can exploit CVE-2021-34782 by gaining access to sensitive information through improper access controls on API endpoints in Cisco DNA Center.
Which versions of Cisco DNA Center are affected by CVE-2021-34782?
Cisco DNA Center versions up to 2.2.2.5 and between 2.2.3.0 to 2.2.3.3 are affected by CVE-2021-34782.
Where can I find more information about CVE-2021-34782?
You can find more information about CVE-2021-34782 in the Cisco Security Advisory at the following link: [CISCO-SA-DNAC-INFODISC-KYC6YNCS]
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/title
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco dna center
- version/cisco dna center/2.2.3.0