SB2019071719 - Use of hard-coded credentials in Cisco FindIT Network Manager

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019071719

SB2019071719 - Use of hard-coded credentials in Cisco FindIT Network Manager

Published: July 17, 2019 Updated: July 18, 2019

Security Bulletin ID SB2019071719
Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use of hard-coded credentials (CVE-ID: CVE-2019-1919)

The vulnerability allows a local attacker to gain full access to vulnerable system.

The vulnerability exists due to the presence of an account with static credentials in the virtual machine (VM) images in the underlying Linux operating system. A local unauthenticated attacker who has access to the VM console can log in to the command line of the affected VM with the static account that has root privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install update from vendor's website.

References