What is CVE-2017-12315?

CVE-2017-12315 is a medium-severity vulnerability in Cisco Hyperflex_hx_data_platform, classified under Information Disclosure. CVSS score: 6.0/10. Published 2017-11-16.

How severe is CVE-2017-12315?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Information disclosure in Cisco Hyperflex_hx_data_platform

CVE-2017-12315

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attack…

Vulnerability class: Information Disclosure

EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N.

Affected products

Cisco Hyperflex_hx_data_platform — versions 2.6\(1a\)
N/a Cisco Hyperflex System — versions Cisco HyperFlex System

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-12315?: CVE-2017-12315 is a medium-severity vulnerability in Cisco Hyperflex_hx_data_platform, classified under Information Disclosure. CVSS score: 6.0/10. Published 2017-11-16.
How severe is CVE-2017-12315?: Medium severity. CVSS v3 base score is 6.0 out of 10.