Information disclosure in Cisco Wide_area_application_services

CVE-2012-1348

Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a brute-force attack on…

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Wide_area_application_services — versions 4.4, 5.0, 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)