Cisco Security Advisory - Cisco Common Services Platform Collector Information Disclosure Vulnerability

[Netwörkheäd]

Cisco Common Services Platform Collector Information Disclosure Vulnerability

<p>A vulnerability in the web-based management interface of Cisco&nbsp;Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to access sensitive data on an affected system.</p>
<p>This vulnerability exists because the application does not sufficiently protect sensitive data when responding to a specific API request. An attacker could exploit the vulnerability by sending a crafted HTTP request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the users of the application, including security questions and answers. To exploit this vulnerability an attacker would need valid <em>Administrator</em> credentials.</p>
<p>Cisco&nbsp;expects to release software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p>
<p>This advisory is available at the following link:<br><a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cspc-info-disc-KM3bGVL" target="_blank" rel="noopener">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cspc-info-disc-KM3bGVL</a></p>

     
         
Security Impact Rating:  Medium
   
   
       
CVE: CVE-2021-34774
Source: Cisco Common Services Platform Collector Information Disclosure Vulnerability