Vulnerability · Published Aug 4, 2021 · Assigned by cisco
CVE-2021-34707Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability
Medium 6.5
In plain English
A medium-severity information exposure in Cisco Evolved Programmable Network Manager (EPNM) from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Official description
A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit the vulnerability by sending a specific API request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | n/a |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- 20210804 Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability vendor-advisory, x_refsource_CISCO