PT-2021-3789 · Cisco · Cisco Epnm

Published 2021-08-04 · Updated 2021-08-11 · CVE-2021-34707

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager (EPNM) (affected versions not specified)

Description A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This issue exists because the application does not sufficiently protect sensitive data when responding to an API request. An attacker could exploit this by sending a specific API request to the affected application, potentially obtaining sensitive information about the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-04064

CVE-2021-34707

Affected Products

Cisco Epnm

References · 6

• https://bdu.fstec.ru/vul/2021-04064 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34707 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34707 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-disc-PjTZ5r6C · Vendor Advisory
• https://t.me/cvenotify/18659 · Telegram Post
• https://t.me/cibsecurity/26842 · Telegram Post