PT-2022-1420 · Cisco · Cisco Adaptive Security Device Manager

Jake Baines · Published 2022-01-12 · Updated 2022-08-19 · CVE-2022-20651

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Device Manager (ASDM) (affected versions not specified)

Description The issue is related to insufficient protection of registration data in the logging component of Cisco Adaptive Security Device Manager (ASDM). This could allow an authenticated, local attacker to view sensitive information in clear text on an affected system, specifically when Cisco ADSM is deployed in a shared workstation environment. The vulnerability is due to the storage of unencrypted credentials in certain logs, which an attacker could exploit by accessing the logs on an affected system, potentially allowing them to view the credentials of other users of the shared device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2022-00521

CVE-2022-20651

Affected Products

Cisco Adaptive Security Device Manager

References · 10

• 🔥 https://rapid7.com/blog/post/2022/08/11/rapid7-discovered-vulnerabilities-in-cisco-asa-asdm-and-firepower-services-software · Exploit
• https://osv.dev/vulnerability/CVE-2022-20651 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asdm-logging-jnLOY422 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20651 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022012416 · Note
• https://t.me/cvenotify/31998 · Telegram Post
• https://t.me/cvenotify/34950 · Telegram Post
• https://t.me/cvenotify/34725 · Telegram Post
• https://t.me/cibsecurity/44946 · Telegram Post