CVE-2024-20490

Summary

CVE-2024-20490 is a logging vulnerability affecting Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO). An attacker with access to a tech support file could view sensitive information, including clear-text HTTP proxy server admin credentials. The vulnerability arises due to the recording of HTTP proxy credentials in an internal log that is stored within tech support files. An attacker could exploit this flaw by gaining access to a tech support file generated from an affected system. It is essential to handle debug logs and tech support files securely and to share them only with trusted parties as they may contain sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.