6.5 Moyenne

CVE-2019-1953 A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an…

Description

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging the admin password when a user is forced to modify the default password when logging in to the web portal for the first time. Subsequent password changes are not logged and other accounts are not affected. An attacker could exploit this vulnerability by viewing the admin clear text password and using it to access the affected system. The attacker would need a valid user account to exploit this vulnerability.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Enterprise NFV Infrastructure Software 3.9	premières → < 3.9.1	3.9.1

Références

20190807 Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability tools.cisco.com

Chronologie

Publiée 8 août 2019
Dernière modification 21 novembre 2024

Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →

CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 Élevée CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Moyenne CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Moyenne CVE-2026-20090 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 4.8 Moyenne

Suivre cette CVE