A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of sensitive information. An attacker could exploit this vulnerability by inspecting the responses from the API. Under certain circumstances, a successful exploit could allow the attacker to access the API with the privileges of a higher-level user account. To successfully exploit this vulnerability, the attacker would need at least valid Observer credentials.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HCisco Catalyst Center
APPCisco2.3.4.0< 2.3.3.6
Powiązane podatności
A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker t...
A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unau...
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthen...
A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Softwa...
A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthentica...