cisco-sa-nd-unenum-2xFFh472: Cisco Nexus Dashboard LDAP Username Enumeration Vulnerability
A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.This vulnerability is due to the improper handling of LDAP authentication requests. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow an attacker to determine which usernames are valid LDAP user accounts.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-unenum-2xFFh472
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-nd-unenum-2xFFh472?
The severity of cisco-sa-nd-unenum-2xFFh472 is considered high due to the potential for unauthorized access to LDAP user account information.
How do I fix cisco-sa-nd-unenum-2xFFh472?
To fix cisco-sa-nd-unenum-2xFFh472, update your Cisco Nexus Dashboard to the latest patched version released by Cisco.
What systems are affected by cisco-sa-nd-unenum-2xFFh472?
cisco-sa-nd-unenum-2xFFh472 affects the Cisco Nexus Dashboard software.
Can cisco-sa-nd-unenum-2xFFh472 be exploited remotely?
Yes, cisco-sa-nd-unenum-2xFFh472 can be exploited by unauthenticated remote attackers.
What type of attack is associated with cisco-sa-nd-unenum-2xFFh472?
cisco-sa-nd-unenum-2xFFh472 is associated with LDAP account enumeration attacks.