Description

A vulnerability in Cisco IND could allow an authenticated, local attacker to read application data. This vulnerability is due to insufficient default file permissions that are applied to the application data directory. An attacker could exploit this vulnerability by accessing files in the application data directory. A successful exploit could allow the attacker to view sensitive information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. 

INFO

Published Date :

2024-11-15T15:20:49.364Z

Last Modified :

2024-11-15T15:37:44.726Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2023-20039 vulnerability.

Vendors Products
Cisco
  • Industrial Network Director
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-20039.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact