Cisco DNA Center Information Disclosure Vulnerability

A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of authentication tokens by the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker access to sensitive device information, which includes configuration files.

N/A

信息暴露

Cisco Digital Network Architecture Center 授权问题漏洞

Cisco Digital Network Architecture Center（DNA Center）是美国思科（Cisco）公司的一套数字网络体系结构解决方案。该方案能够扩展并保护网络内的设备、应用程序等。 Cisco Digital Network Architecture Center software 1.3.1.4之前的1.3.x版本中存在授权问题漏洞，该漏洞源于程序没有正确处理身份验证令牌。远程攻击者可通过发送HTTP请求利用该漏洞访问敏感信息。

N/A

N/A