Information disclosure in Cisco Ios

CVE-2000-0368

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.

Vulnerability class: Information Disclosure

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Patch, government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
  • cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)