According to its self-reported version, Cisco NX-OS Software is affected by an information disclosure vulnerability in the SSH CLI key management functionality which could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

自己報告されたバージョンによると、Cisco NX-OSソフトウェアはSSH CLIキー管理機能の情報漏えいの脆弱性の影響を受けます。これにより、認証されたローカルの攻撃者がユーザーの秘密のSSHキーを、標的デバイスの認証されたすべてのユーザーに漏えいする可能性があります。攻撃者は有効な管理者デバイス資格情報で認証する必要があります。詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

根據其自我報告的版本，Cisco NX-OS 軟體受到 SSH CLI 金鑰管理功能中資訊洩漏弱點的影響，允許經驗證的本機攻擊者將使用者私密 SSH 金鑰洩漏給目標裝置上所有經驗證的使用者。攻擊者必須透過有效的系統管理員裝置驗證來進行驗證。如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

根据其自我报告的版本，Cisco NX-OS 软件受到 SSH CLI 密钥管理功能中信息泄露漏洞的影响，允许经身份验证的本地攻击者将用户 SSH 私钥泄露给目标设备上所有经身份验证的用户。攻击者必须使用有效的管理员设备凭据来进行验证。若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to incomplete error handling if a specific error type occurs during the SSH key export. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the CLI. A successful exploit could allow the attacker to expose a user's private SSH key. In addition, a similar type of error in the SSH key import could cause the passphrase-protected private SSH key to be imported unintentionally.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
126344	Cisco NX-OS Software SSH Key Information Disclosure Vulnerability	Nessus	CISCO	2019/6/28	2021/2/5	medium
126344	Cisco NX-OSソフトウェアのSSHキー情報漏えいの脆弱性	Nessus	CISCO	2019/6/28	2021/2/5	medium
126344	Cisco NX-OS 軟體 SSH 金鑰資訊洩漏弱點	Nessus	CISCO	2019/6/28	2021/2/5	medium
126344	Cisco NX-OS 软件 SSH 密钥信息泄露漏洞	Nessus	CISCO	2019/6/28	2021/2/5	medium
501352	Cisco NX-OS Software SSH Key Information Disclosure (CVE-2019-1731)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium