CVE-2022-20630: Cisco DNA Center Information Disclosure Vulnerability
First published: Thu Feb 10 2022(Updated: )
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco DNA Center | >=2.1.2.0<2.2.2.8 | |
| Cisco DNA Center | >=2.2.3.0<2.2.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20630?
CVE-2022-20630 is a vulnerability in the audit log of Cisco DNA Center that allows an authenticated, local attacker to view sensitive information in clear text.
How does CVE-2022-20630 affect Cisco DNA Center?
CVE-2022-20630 affects Cisco DNA Center by exposing sensitive information in clear text in the audit log.
What is the severity of CVE-2022-20630?
The severity of CVE-2022-20630 is medium with a severity rating of 4.4.
How can an attacker exploit CVE-2022-20630?
An attacker with administrative privileges can exploit CVE-2022-20630 to view sensitive information in clear text.
Is there a fix available for CVE-2022-20630?
Yes, Cisco has released a security advisory with mitigation details for CVE-2022-20630. Please refer to the Cisco Security Advisory for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/title
- agent/references
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/cisco
- canonical/cisco dna center
- version/cisco dna center/2.1.2.0
- version/cisco dna center/2.2.3.0