cisco-sa-ndhs-idv-Bk8VqEDc: Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities

Published Oct 2, 2024
·
Updated

Multiple vulnerabilities in the logging functions of Cisco Nexus Dashboard Fabric Controller (NDFC), Cisco Nexus Dashboard Insights, and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information.For more information

Affected Software

3 affected components
Cisco Nexus Dashboard Fabric Controller
Cisco Nexus Dashboard Insights
Cisco Nexus Dashboard Orchestrator

Event History

Oct 2, 2024
Advisory Published
via Cisco·04:00 PM
Data Sourced
via Cisco·04:00 PM
DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of cisco-sa-ndhs-idv-Bk8VqEDc?

The severity of cisco-sa-ndhs-idv-Bk8VqEDc is moderate, as it allows an attacker to access sensitive information through compromised tech support files.

2

How do I fix cisco-sa-ndhs-idv-Bk8VqEDc?

To resolve the vulnerabilities in cisco-sa-ndhs-idv-Bk8VqEDc, ensure that you restrict access to tech support files and apply the latest updates from Cisco.

3

Which products are affected by cisco-sa-ndhs-idv-Bk8VqEDc?

The products affected by cisco-sa-ndhs-idv-Bk8VqEDc include Cisco Nexus Dashboard Fabric Controller, Cisco Nexus Dashboard Insights, and Cisco Nexus Dashboard Orchestrator.

4

What information can be exposed due to cisco-sa-ndhs-idv-Bk8VqEDc?

Due to cisco-sa-ndhs-idv-Bk8VqEDc, sensitive information stored in tech support files can be exposed to unauthorized users.

5

Is there a workaround for cisco-sa-ndhs-idv-Bk8VqEDc?

Currently, there is no official workaround for cisco-sa-ndhs-idv-Bk8VqEDc, and it is recommended to implement the security updates provided by Cisco.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203