CVE-2020-27125

CVE-2020-27125 concerns Cisco Security Manager, where insufficient protection of static credentials allowed unauthenticated, remote access to sensitive information by viewing source code. Connected documents confirm affected versions are prior to 4.22 and indicate Cisco released fixes in Release ...

Cisco Security Manager < 4.22 Static Credential Usage (cisco-sa-csm-rce-8gjUz9fW)

The version of Cisco Security Manager running on the remote web server is prior to 4.22. It is, therefore, affected static credential usage. An unauthenticated, remote attacker could exploit this, by analyzing the application source code and obtaining credentials, to access sensitive information ...