Vulnerability Details CVE-2017-3842
A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. More Information: CSCuh91455. Known Affected Releases: 7.2(1)V7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/96256
- http://www.securitytracker.com/id/1037842
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-idm
- http://www.securityfocus.com/bid/96256
- http://www.securitytracker.com/id/1037842
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-idm
Products affected by CVE-2017-3842
-
cpe:2.3:a:cisco:intrusion_prevention_system_device_manager:7.2(1)v7