CVE-2021-1219
Assigner: cisco
Published: 2021-01-20T00:00:00
State: PUBLISHED
affected: product: Cisco Smart Software Manager On-Prem 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-01-20T00:00:00
descriptions: value: A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by gaining access to the static credential that is stored on the local device. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. 
metrics: cvssV3_0: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-798
description: CWE-798
type: CWE
source: advisory: cisco-sa-cssm-sc-Jd42D4Tq
defect: CSCvm42283
discovery: INTERNAL
title: Cisco Smart Software Manager Satellite Static Credential Vulnerability