CVE-2017-12315
published 2017-11-16CVE-2017-12315: A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view…
PriorityP422medium6CVSS 3.0
AVLACLPRHUINSCCHINAN
EPSS
0.33%
24.5th percentile
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | hyperflex_hx_data_platform | — | — |
| cisco | hyperflex_system_authenticated | — | — |
CVSS provenance
nvdv3.06.0MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco6.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wgm8-4c2w-8672: A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to
ghsa_unreviewed·2022-05-13
CVE-2017-12315 [MEDIUM] CWE-200 GHSA-wgm8-4c2w-8672: A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472.
Cisco
Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
vendor_cisco·2017-11-16·CVSS 6.0
CVE-2017-12315 [MEDIUM] CWE-200 Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack.
The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance a
Cisco
Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-12315 Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
CVE-2017-12315: Cisco HyperFlex System Authenticated Information Disclosure Vulnerability
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional re
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-11-16
Published