Cisco HyperFlex World-Readable Sensitive Information Vulnerability

Vulnerability

Cisco HyperFlex Software contains a vulnerability (CVE-2018-15407) in its installation process where installation files are not properly cleaned up after setup, leaving them world-readable on the filesystem. The affected versions include all releases prior to the fixed versions indicated in Cisco bug ID(s) referenced in the advisory [1]. The vulnerability requires authenticated local access to the system.

Exploitation

An attacker must have valid local credentials (authenticated access) to the affected Cisco HyperFlex system. With this access, the attacker can browse the filesystem and read the residual installation files that were left with overly permissive permissions. No special privileges beyond standard user access are needed to read these files, as they are world-readable.

Impact

A successful exploit allows the attacker to read sensitive information, specifically configuration details of the system. This could include passwords, keys, or other secrets that could be used to further compromise the system or gain unauthorized access. The confidentiality of the system is breached, and the attacker gains knowledge that may enable privilege escalation or lateral movement.

Mitigation

Cisco has released fixed software versions to address this vulnerability. Customers should upgrade to the latest patched release as indicated in the Cisco Security Advisory [1]. No workarounds are available. The vulnerability is not publicly exploited and is not listed on the CISA Known Exploited Vulnerabilities catalog at the time of publication.