CVE-2024-20491
published 2024-10-02CVE-2024-20491: A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive…
PriorityP350high8.6CVSS 3.1
AVNACLPRNUINSCCHINAN
EPSS
0.28%
19.6th percentile
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information.
This vulnerability exists because remote controller credentials are recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view remote controller admin credentials in clear text.
Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | cisco_nexus_dashboard_insights | — | — |
| cisco | nexus_dashboard_fabric_controller | >= 12.1.0 < 12.2.2.241 | 12.2.2.241 |
| cisco | nexus_dashboard_hosted_services | — | — |
| cisco | nexus_dashboard_insights | < 6.4.0 | 6.4.0 |
| cisco | nexus_dashboard_insights | >= 6.5.0 < 6.5.1.32 | 6.5.1.32 |
| cisco | nexus_dashboard_orchestrator | < 4.2\(3o\) | 4.2\(3o\) |
| cisco | nexus_dashboard_orchestrator | >= 4.4.0 < 4.4.1.1012 | 4.4.1.1012 |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
vendor_cisco6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
vendor_cisco·2024-10-02·CVSS 6.3
CVE-2024-20490 [MEDIUM] CWE-200 Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
Multiple vulnerabilities in the logging functions of Cisco Nexus Dashboard Fabric Controller (NDFC), Cisco Nexus Dashboard Insights, and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndhs-idv-Bk8VqEDc
Cisco
Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2024-20491 Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
CVE-2024-20491: Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
Multiple vulnerabilities in the logging functions of Cisco Nexus Dashboard Fabric Controller (NDFC), Cisco Nexus Dashboard Insights, and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-200, CWE-200
Bug IDs: CSCwk96526, CSCwk96544, CSCwm28892, CSCwk96526, CSCwm28892
GHSA
GHSA-xxc2-9vrh-pfjm: A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive i
ghsa_unreviewed·2024-10-02
CVE-2024-20491 [MEDIUM] CWE-200 GHSA-xxc2-9vrh-pfjm: A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive i
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information.
This vulnerability exists because remote controller credentials are recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view remote controller admin credentials in clear text.
Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-02
Published