Medium severity · published Nov 16, 2017
CVE-2017-12315
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information…
6.0
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HH
Hyperflex HX Data Platform · Cisco
2.6(1a) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-12315
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-12315
Third Party Advisory
http://www.securityfocus.com/bid/101864
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-hyperflex
More from Hyperflex HX Data Platform
9.8
CVE-2021-1498
Cisco HyperFlex HX Command Injection Vulnerabilities
9.8
CVE-2021-1497
Cisco HyperFlex HX Command Injection Vulnerabilities
8.8
CVE-2019-1958
A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
8.8
CVE-2018-15380
Cisco HyperFlex Software Command Injection Vulnerability
8.6
CVE-2018-15382
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens
