Cisco Nexus Dashboard Insights Vulnerability: Remote Controller Credentials at Risk

CVE-2024-20491

Summary

A vulnerability exists in Cisco Nexus Dashboard Insights, where sensitive information can be exposed due to a flaw in its logging function. Specifically, remote controller credentials are inadvertently recorded in an internal log that is included in tech support files. If an unauthorized individual gains access to one of these tech support files, they may be able to retrieve sensitive credentials stored in clear text. Organizations are strongly advised to implement best practices for handling debug logs and tech support files with the utmost care, ensuring they are shared only with trusted parties to mitigate potential risks.

References