Cisco DNA Center Information Disclosure Vulnerability

Vulnerability

The vulnerability resides in the audit log functionality of Cisco DNA Center. Due to unsecured logging, sensitive information including user credentials is stored in clear text. Affected versions are Cisco DNA Center releases 2.1.2, 2.2.2 (before 2.2.2.8), 2.2.3 (before 2.2.3.4), and 2.3.2 (before 2.3.2.01). Releases earlier than 2.1.2 are not vulnerable [1].

Exploitation

An attacker must have administrative privileges on the affected system. The attacker can access the audit logs through the CLI. No additional user interaction is required beyond authentication. The attacker can then view the clear-text sensitive information stored in the logs [1].

Impact

Successful exploitation allows the attacker to retrieve sensitive information, including user credentials. This results in information disclosure, potentially enabling further unauthorized access to the network or other systems. The attacker gains knowledge of credentials that could be used to compromise additional components [1].

Mitigation

Cisco has released fixed versions: 2.2.2.8, 2.2.3.4, and 2.3.2.01. Users should upgrade via the System Updates feature of Cisco DNA Center. For release 2.1.2, migration to a fixed release is required. No workaround is available. The advisory does not list this CVE on the Known Exploited Vulnerabilities (KEV) catalog [1].