Information disclosure in Cisco Mobility Services Engine

CVE-2015-0673

Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.

Vulnerability class: Information Disclosure

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

Affected products

Cisco Mobility_services_engine — versions 8.0\(110.0\)
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)