Information disclosure in Cisco iOS

CVE-2015-6375

The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010.

Vulnerability class: Information Disclosure

EPSS: 0.003 (23.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 15.2\(2\)e3
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)