4
CVSSv2

CVE-2020-3281

Published: 03/06/2020 Updated: 11/06/2020
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote malicious user to view sensitive information in clear text. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs and obtaining credentials that they may not normally have access to. A successful exploit could allow the malicious user to use those credentials to discover and manage network devices.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco digital network architecture center

Vendor Advisories

A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text The vulnerability is due to the storage of certain unencrypted credentials An attacker could exploit this vulnerability by accessing the audit logs and obtainin ...