CVE-2019-1953 Cisco Enterprise NFV Infrastructure Software Password Recovery Vulnerability

Medium 6.5 Published 8 Aug 2019 Updated 21 Nov 2024

An authenticated attacker can view the admin password in clear text via logs, enabling unauthorized access to the Cisco NFVIS system.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-1953?

CVE-2019-1953 is a medium-severity vulnerability in Cisco Enterprise NFV Infrastructure Software, published on 8 Aug 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text. The vulnerability is due to incorrectly logging the admin password when a user is forced to modify the default password when logging in to the web portal for the first time. Subsequent password changes are not logged and other accounts are not affected. An attacker could exploit this vulnerability by viewing the admin clear text password and using it to access the affected system. The attacker would need a valid user account to exploit this vulnerability.

Weakness: CWE-532

Which versions are affected by CVE-2019-1953?

It affects 1 product.

Products include Cisco Enterprise Nfv Infrastructure Software.

How do I fix CVE-2019-1953?

No fix has been published for CVE-2019-1953 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-1953 being exploited?

There is no known exploitation of CVE-2019-1953 in the wild and no public exploit code.

Sources

Also known as GHSA-ppgh-3fjj-h297.