Skip to content
fr Sign in
6.3 Medium

CVE-2024-20491 A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech…

Description

A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because remote controller credentials are recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view remote controller admin credentials in clear text. Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information.

Affected products and versions

Product Affected versions Fixed in
Cisco Nexus Dashboard Insights 6.3.1 No fix stated
Cisco Nexus Dashboard Insights 6.2 6.2.1 → 6.2.2 No fix stated
Cisco Nexus Dashboard Insights 6.1 6.1.1 → 6.1.3 No fix stated
Cisco Nexus Dashboard Insights 6.0 6.0.1 → 6.0.2 No fix stated
Cisco Nexus Dashboard Insights 5.1 5.1.0.131 → 5.1.0.135 No fix stated
Cisco Nexus Dashboard Insights 5.0 5.0.1.150 → 5.0.1.154 No fix stated
Cisco Nexus Dashboard Insights 2.2 2.2.2.125 → 2.2.2.126 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Nexus Dashboard Insights

The 4 CVEs of Cisco Nexus Dashboard Insights →
CVE-2026-20174 A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote… 4.9 Medium CVE-2026-20041 A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote… 6.1 Medium CVE-2024-20281 A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services… 7.5 High
Track this CVE