A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system. The vulnerability is due to insufficient user authorization. An attacker could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read database files from the filesystem of the underlying operating system.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58dj | Vendor Advisory |
Configurations
History
27 Jan 2021, 20:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58dj - Vendor Advisory | |
| CPE | cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 4.9
v3 : 5.5 |
26 Jan 2021, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system. The vulnerability is due to insufficient user authorization. An attacker could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read database files from the filesystem of the underlying operating system. |
20 Jan 2021, 21:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-01-20 21:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-1235
Mitre link : CVE-2021-1235
CVE.ORG link : CVE-2021-1235
JSON object : View
Products Affected
cisco
- sd-wan_vmanage
CWE
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere