Information disclosure in Cisco Enterprise Nfv Infrastructure Software
CVE-2019-1961
A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the im…
EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-1961?
- CVE-2019-1961 is a medium-severity vulnerability in Cisco Enterprise Nfv Infrastructure Software, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.9/10. Published 2019-08-08.
- How severe is CVE-2019-1961?
- Medium severity. CVSS v3 base score is 4.9 out of 10.