cisco-sa-dnac-audit-log-59RBdwb6: Cisco Digital Network Architecture Center Information Disclosure Vulnerability
A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-audit-log-59RBdwb6
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-dnac-audit-log-59RBdwb6?
The severity of cisco-sa-dnac-audit-log-59RBdwb6 is considered high due to the potential exposure of sensitive information.
How do I fix cisco-sa-dnac-audit-log-59RBdwb6?
To fix cisco-sa-dnac-audit-log-59RBdwb6, Cisco recommends updating to the latest version of the Digital Network Architecture Center that addresses this vulnerability.
What type of information is exposed by cisco-sa-dnac-audit-log-59RBdwb6?
cisco-sa-dnac-audit-log-59RBdwb6 can expose unencrypted credentials and sensitive information stored in logs.
Who is affected by cisco-sa-dnac-audit-log-59RBdwb6?
Organizations using the vulnerable versions of Cisco Digital Network Architecture Center are affected by cisco-sa-dnac-audit-log-59RBdwb6.
Is cisco-sa-dnac-audit-log-59RBdwb6 a remote vulnerability?
Yes, cisco-sa-dnac-audit-log-59RBdwb6 allows an authenticated remote attacker to exploit the vulnerability.