CVE-2026-20294

Katalog CVE

CVSS 6.5 · Medium EPSS 0,13%

Kerentanan Cleartext Transmission of Sensitive Information. Skor CVSS 3.1 6.5 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for specific template types that are not included in the encryption allowlist. A low-privileged attacker could exploit this vulnerability by viewing logs on the local system or on a remote logging server. A successful exploit could allow the attacker to view sensitive authentication credentials, which could lead to further compromise of network infrastructure and connected services.

Rincian

Terbit di NVD

5 Agustus 2026

Terakhir diubah

6 Agustus 2026

Status NVD

Awaiting Analysis

CVSS 3.1

6.5 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-319: Cleartext Transmission of Sensitive Information

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe