Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The vulnerability is due to missing authentication on a specific part of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the interface. A successful exploit could allow the attacker to read confidential information from an affected device.

N/A

关键功能的认证机制缺失

Cisco Data Center Network Manager 访问控制错误漏洞

Cisco Data Center Network Manager（DCNM）是美国思科（Cisco）公司的一套数据中心管理系统。该系统适用于Cisco Nexus和MDS系列交换机，提供存储可视化、配置和故障排除等功能。 Cisco DCNM 11.4(1)之前版本中的Web管理界面存在访问控制错误漏洞，该漏洞源于Web管理界面的特定部分缺少身份验证。远程攻击者可借助特制请求利用该漏洞从设备中获取机密信息。

N/A

N/A