Severity
Medium
Analysis Summary
CVE-2022-20844
Cisco Software-Defined Application Visibility and Control on Cisco vManage could allow a remote attacker to obtain sensitive information, caused by a flaw in authentication mechanism. By accessing the exposed GUI of Cisco SD-AVC, a remote attacker could exploit this vulnerability to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-20844
Affected Vendors
Cisco
Affected Products
Cisco Software-Defined Application Visibility and Control
Cisco vManage
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.