CVE-2024-20490 Cisco Nexus Dashboard Fabric Controller and Nexus Dashboard Orchestrator Information Disclosure Vulnerability
An attacker with access to a tech support file can view HTTP proxy admin credentials in clear text, requiring secure handling of diagnostic logs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-20490?
CVE-2024-20490 is a medium-severity vulnerability in Cisco Data Center Network Manager, published on 2 Oct 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because HTTP proxy credentials could be recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view HTTP proxy server admin credentials in clear text that are configured on Nexus Dashboard to reach an external network. Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information.
Which versions are affected by CVE-2024-20490?
It affects 3 products.
Products include Cisco Nexus Dashboard Fabric Controller, Cisco Nexus Dashboard Insights, Cisco Nexus Dashboard Orchestrator.
How do I fix CVE-2024-20490?
No fix has been published for CVE-2024-20490 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20490 being exploited?
There is no known exploitation of CVE-2024-20490 in the wild and no public exploit code.
Other vulnerabilities in Cisco Data Center Network Manager
- CVE-2024-20432 Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability
- CVE-2024-20536 Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability
- CVE-2024-20449 Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability
- CVE-2024-20348 Path traversal in Cisco Data Center Network Manager
- CVE-2024-20448 Cisco Nexus Dashboard Fabric Controller Credential Information Disclosure Vulnerability
Sources
Also known as GHSA-22cv-mr79-8p5c.