CVE-2018-15433: Cisco Prime Infrastructure Information Disclosure Vulnerability

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-05 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to the transmission of sensitive information as part of a GET request. An attacker could exploit this vulnerability by sending a GET request to a vulnerable device. A successful exploit could allow the attacker to view sensitive information.

Affected products

Cisco Prime Infrastructure: 3.2

References

http://www.securityfocus.com/bid/105562
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-prime-id
http://www.securityfocus.com/bid/105562
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-prime-id

Get alerted when CVE-2018-15433 or the next vulnerability affects your stack