CVE-2024-20491

Summary

CVE-2024-20491 is a logging vulnerability affecting Cisco Nexus Dashboard Insights. This issue stems from the recording of remote controller credentials in an internal log stored in tech support files. An attacker with access to a tech support file from an affected system could exploit this vulnerability and gain clear text access to remote controller admin credentials. The best practice to mitigate this risk is to securely store debug logs and tech support files and limit their sharing to trusted parties.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.