← voltar
CVE-2018-15433

Cisco Prime Infrastructure Information Disclosure Vulnerability

EPSS 1.0%CWE-200
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS EPSS 1.0%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
05 out 2018Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. A successful exploit could allow the attacker to view sensitive information.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →