What is CVE-2022-20651?

CVE-2022-20651 is a medium-severity vulnerability in Cisco Adaptive_security_device_manager, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2022-06-22.

How severe is CVE-2022-20651?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2022-20651 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Cisco Adaptive_security_device_manager

CVE-2022-20651

A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shar…

EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cisco Adaptive_security_device_manager
Cisco Adaptive Security Device Manager (Asdm) — versions n/a

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

Public proof-of-concept exploits

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-20651?: CVE-2022-20651 is a medium-severity vulnerability in Cisco Adaptive_security_device_manager, classified under Insertion of Sensitive Information into Log File. CVSS score: 5.5/10. Published 2022-06-22.
How severe is CVE-2022-20651?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2022-20651 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.