13 Layers

A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated, remote attacker to gain entree to sensitive information that should be restricted. The attacker must have valid device credentials. This vulnerability is due to improper access controls on API endpoints. An attacker could exploit the vulnerability by sending a special API request to an affected application. A successful exploit could allow the attacker to obtain delicate information about other users who are configured with higher privileges on the application. (CVSS:0.0) (Terminal Update:2021-10-06)

13 Layers Managed Security Services