Cisco · Cisco Data Center Network Manager · CVE-2020-3461
Name of the Vulnerable Software and Affected Versions:
Cisco Data Center Network Manager (DCNM) (affected versions not specified)
Description:
A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The issue is due to missing authentication on a specific part of the interface. An attacker could exploit this by sending a crafted request to the interface, potentially allowing them to read confidential information from an affected device.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.