CVE-2023-20039: Cisco Industrial Network Director File Permissions
A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. This vulnerability is due to insufficient default file permissions that are applied to the application data directory. An attacker could exploit this vulnerability by accessing files in the application data directory. A successful exploit could allow the attacker to view sensitive information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20039?
The severity of CVE-2023-20039 is classified as a medium risk due to its potential impact on application data confidentiality.
How do I fix CVE-2023-20039?
To fix CVE-2023-20039, you should adjust the file permissions for the application data directory to restrict unauthorized access.
Who is affected by CVE-2023-20039?
CVE-2023-20039 affects users of Cisco Industrial Network Director that have not properly configured file permissions.
What kind of exploit is possible with CVE-2023-20039?
An authenticated, local attacker could exploit CVE-2023-20039 to read sensitive application data by accessing improperly secured files.
What is the cause of CVE-2023-20039?
CVE-2023-20039 is caused by insufficient default file permissions set for the application data directory in Cisco Industrial Network Director.