CVE-2024-20281

CVE-2024-20281 affects Cisco Nexus Dashboard and Nexus Dashboard Hosted Services web-based management interface. The vulnerability is a CSRF flaw due to insufficient protections, enabling an unauthenticated, remote attacker to persuade a user to click a malicious link and perform actions with the...

CVE-2024-20302

CVE-2024-20302 affects Cisco Nexus Dashboard Orchestrator (NDO). The issue is in the tenant security implementation caused by improper access controls, enabling an authenticated user with write privileges and a Site Manager or Tenant Manager role to modify or delete tenant templates under non-ass...

CVE-2024-20385

The CVE-2024-20385 entry concerns Cisco Nexus Dashboard Orchestrator (NDO) SSL/TLS certificate validation. The vulnerability stems from the NDO Validate Peer Certificate site management feature, which validates certificates for APIC, CNC, and Cisco Nexus Dashboard only when a new site is added or...

CVE-2024-20490

The CVE-2024-20490 issue affects Cisco Nexus Dashboard Fabric Controller (NDFC) and Nexus Dashboard Orchestrator (NDO). Root cause: HTTP proxy credentials can be recorded in internal logs stored in tech support files, exposing admin credentials in clear text when those files are accessed. Impact:...

CVE-2024-20491

Cisco Nexus Dashboard Insights is affected by a vulnerability in its logging function that can disclose remote controller credentials. The issue arises because credentials are recorded in internal logs stored in tech support files, which an attacker can access to view admin credentials in clear t...