CVE-2022-20630: Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20630?
CVE-2022-20630 is a vulnerability in the audit log of Cisco DNA Center that allows an authenticated, local attacker to view sensitive information in clear text.
How does CVE-2022-20630 affect Cisco DNA Center?
CVE-2022-20630 affects Cisco DNA Center by exposing sensitive information in clear text in the audit log.
What is the severity of CVE-2022-20630?
The severity of CVE-2022-20630 is medium with a severity rating of 4.4.
How can an attacker exploit CVE-2022-20630?
An attacker with administrative privileges can exploit CVE-2022-20630 to view sensitive information in clear text.
Is there a fix available for CVE-2022-20630?
Yes, Cisco has released a security advisory with mitigation details for CVE-2022-20630. Please refer to the Cisco Security Advisory for more information.