Information disclosure in Cisco Mobility Services Engine

CVE-2015-4263

The Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1) allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851.

Vulnerability class: Information Disclosure

EPSS: 0.015 (71.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Mobility_services_engine — versions 10.0\(0.1\)
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)