Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilities
Multiple vulnerabilities in the logging functions of Cisco Nexus Dashboard Fabric Controller (NDFC), Cisco Nexus Dashboard Insights, and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20491US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information.
This vulnerabil… | ||||
| CVE-2024-20490US | high8.6 | — | ||
A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech s… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwk96526external
- CSCwk96544external
- CSCwm28892external
- Cisco Nexus Dashboard Hosted Services Information Disclosure Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- Cisco Security Advisories pageexternal
remediations (3)
- FixedCisco Data Center Network Manager
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus Dashboard Insights
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus Dashboard Orchestrator
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan