Information Disclosure in Cisco Nexus 7000 Devices

CVE-2012-4090

Summary

The management interface in Cisco NX-OS on Nexus 7000 devices permits remote authenticated users with network-operator role access to sensitive configuration information. This vulnerability may lead to unauthorized exposure of critical system configurations, which can be exploited for further malicious activities. Affected users should ensure that only trusted personnel are assigned the network-operator role and regularly review access controls to mitigate potential risks.

References