7.4
High
CVE-2020-27125 A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive…
Description
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by viewing source code. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Security Manager | Versions not published |
References
- 20201116 Cisco Security Manager Static Credential Vulnerability tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Security Manager
The 18 CVEs of Cisco Security Manager →
CVE-2022-20639
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,…
6.1
Medium
CVE-2022-20638
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,…
6.1
Medium
CVE-2022-20637
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,…
6.1
Medium
CVE-2022-20636
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated,…
6.1
Medium