Service Denial Vulnerability in Cisco Prime Service Catalog

CVE-2018-0285

Summary

A vulnerability exists within the service logging mechanism of Cisco Prime Service Catalog that could be exploited by an authenticated remote attacker. This issue arises from excessive logging that can lead to the exhaustion of disk space, ultimately denying service to the user interface for legitimate users. Attackers can initiate specific operations that trigger this extensive logging, creating conditions conducive to service disruption. It is crucial for organizations using this product to monitor their logging practices and implement controls to mitigate potential abuse. For further details, refer to the Cisco Security Advisory and other related resources.

References