A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.
This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.
References
Link | Resource |
---|---|
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Sep 2024, 13:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Cisco
Cisco smart License Utility |
|
References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw - Vendor Advisory | |
CPE | cpe:2.3:a:cisco:smart_license_utility:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:smart_license_utility:2.2.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:smart_license_utility:2.0.0:*:*:*:*:*:*:* |
05 Sep 2024, 12:53
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
04 Sep 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-04 17:15
Updated : 2024-09-19 13:42
NVD link : CVE-2024-20440
Mitre link : CVE-2024-20440
CVE.ORG link : CVE-2024-20440
JSON object : View
Products Affected
cisco
- smart_license_utility
CWE
CWE-532
Insertion of Sensitive Information into Log File