Cisco Nexus 9000 Series Fabric Switches CVE-2019-1589 Information Disclosure Vulnerability

Bugtraq ID:	108175
Class:	Input Validation Error
CVE:	CVE-2019-1589
Remote:	No
Local:	Yes
Published:	May 01 2019 12:00AM
Updated:	May 01 2019 12:00AM
Credit:	Costin Enache of Detack GmbH.
Vulnerable:	Cisco NX-OS Software 0 Cisco Nexus 9000 Series Switches 8.3(0)SK(0.39)
Not Vulnerable:

Cisco Nexus 9000 Series Fabric Switches CVE-2019-1589 Information Disclosure Vulnerability

Cisco Nexus 9000 Series Fabric Switches are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue affects the following products if they are running a vulnerable version of Cisco NX-OS Software

Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode.

This issue is being tracked by Cisco Bug ID CSCvn09807.

Cisco Nexus 9000 Series Fabric Switches CVE-2019-1589 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Nexus 9000 Series Fabric Switches CVE-2019-1589 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Nexus 9000 Series Fabric Switches CVE-2019-1589 Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode (Cisco)