CVE-2015-0673

Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2015-03-26

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Mobility Services Engine (Cisco)

References

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38007
• http://www.securitytracker.com/id/1031971