Lucene search

CiscoCVE-2018-0368

HistoryJul 16, 2018 - 5:29 p.m.

CVE-2018-0368

2018-07-1617:29:00

CWE-200

cisco

web.nvd.nist.gov

cisco

dna center

vulnerability

local attacker

sensitive information

log files

insufficient security restrictions

cisco bug ids

cscvi22400

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient security restrictions imposed by the affected software. An attacker could exploit this vulnerability by accessing unprotected log files. A successful exploit could allow the attacker to access sensitive log files, which may include system credentials, on the affected device. Cisco Bug IDs: CSCvi22400.

Affected configurations

Nvd

Node

ciscoapplication_policy_infrastructure_controller_enterprise_moduleMatch1.1_base

VendorProductVersionCPE
ciscoapplication_policy_infrastructure_controller_enterprise_module1.1_basecpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.1_base:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	application_policy_infrastructure_controller_enterprise_module	1.1_base	cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:1.1_base:::::::*

CNA Affected

[
  {
    "product": "Cisco Digital Network Architecture Center unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Digital Network Architecture Center unknown"
      }
    ]
  }
]

References

www.securityfocus.com/bid/104729

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-dnac-id

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-0368