Files
vuln-cve/data/2025/20xxx/CVE-2025-20290.json
T

925 lines
35 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2025-20290",
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"state": "PUBLISHED",
"assignerShortName": "cisco",
"dateReserved": "2024-10-10T19:15:13.251Z",
"datePublished": "2025-08-27T16:23:46.216Z",
"dateUpdated": "2025-08-27T18:23:36.610Z"
},
"containers": {
"cna": {
"title": "Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability",
"metrics": [
{
"format": "cvssV3_1",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108 100G Fabric Interconnects could allow an authenticated, local attacker access to sensitive information.\r\n\r\nThis vulnerability is due to improper logging of sensitive information. An attacker could exploit this vulnerability by accessing log files on the file system where they are stored. A successful exploit could allow the attacker to access sensitive information, such as stored credentials."
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-infodis-TEcTYSFG",
"name": "cisco-sa-nxos-infodis-TEcTYSFG"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"source": {
"advisory": "cisco-sa-nxos-infodis-TEcTYSFG",
"discovery": "INTERNAL",
"defects": [
"CSCwn23023"
]
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Exposure of Sensitive Information to an Unauthorized Actor",
"type": "cwe",
"cweId": "CWE-200"
}
]
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco NX-OS Software",
"versions": [
{
"version": "9.2(3)",
"status": "affected"
},
{
"version": "7.0(3)I5(2)",
"status": "affected"
},
{
"version": "7.0(3)I4(5)",
"status": "affected"
},
{
"version": "7.0(3)I4(6)",
"status": "affected"
},
{
"version": "9.2(2v)",
"status": "affected"
},
{
"version": "7.0(3)I4(7)",
"status": "affected"
},
{
"version": "7.0(3)I4(8)",
"status": "affected"
},
{
"version": "9.2(1)",
"status": "affected"
},
{
"version": "9.2(2t)",
"status": "affected"
},
{
"version": "9.2(3y)",
"status": "affected"
},
{
"version": "7.0(3)I7(6z)",
"status": "affected"
},
{
"version": "9.3(2)",
"status": "affected"
},
{
"version": "7.0(3)F3(3)",
"status": "affected"
},
{
"version": "7.0(3)I7(3z)",
"status": "affected"
},
{
"version": "7.0(3)IM7(2)",
"status": "affected"
},
{
"version": "7.0(3)I7(5a)",
"status": "affected"
},
{
"version": "7.0(3)I6(1)",
"status": "affected"
},
{
"version": "7.0(3)I5(3b)",
"status": "affected"
},
{
"version": "9.2(4)",
"status": "affected"
},
{
"version": "7.0(3)F3(3c)",
"status": "affected"
},
{
"version": "7.0(3)F3(1)",
"status": "affected"
},
{
"version": "7.0(3)F3(5)",
"status": "affected"
},
{
"version": "7.0(3)I7(2)",
"status": "affected"
},
{
"version": "7.0(3)I5(3)",
"status": "affected"
},
{
"version": "7.0(3)I7(3)",
"status": "affected"
},
{
"version": "7.0(3)I6(2)",
"status": "affected"
},
{
"version": "9.3(1)",
"status": "affected"
},
{
"version": "7.0(3)I7(6)",
"status": "affected"
},
{
"version": "7.0(3)I4(8z)",
"status": "affected"
},
{
"version": "7.0(3)I4(9)",
"status": "affected"
},
{
"version": "7.0(3)I7(4)",
"status": "affected"
},
{
"version": "7.0(3)I7(7)",
"status": "affected"
},
{
"version": "7.0(3)I5(1)",
"status": "affected"
},
{
"version": "9.3(1z)",
"status": "affected"
},
{
"version": "9.2(2)",
"status": "affected"
},
{
"version": "7.0(3)F3(4)",
"status": "affected"
},
{
"version": "7.0(3)I4(8b)",
"status": "affected"
},
{
"version": "7.0(3)I4(6t)",
"status": "affected"
},
{
"version": "7.0(3)I5(3a)",
"status": "affected"
},
{
"version": "7.0(3)I7(5)",
"status": "affected"
},
{
"version": "7.0(3)F3(3a)",
"status": "affected"
},
{
"version": "7.0(3)I4(8a)",
"status": "affected"
},
{
"version": "7.0(3)F3(2)",
"status": "affected"
},
{
"version": "7.0(3)I4(4)",
"status": "affected"
},
{
"version": "7.0(3)I7(1)",
"status": "affected"
},
{
"version": "7.0(3)IA7(2)",
"status": "affected"
},
{
"version": "7.0(3)IA7(1)",
"status": "affected"
},
{
"version": "9.3(3)",
"status": "affected"
},
{
"version": "7.0(3)I7(8)",
"status": "affected"
},
{
"version": "9.3(4)",
"status": "affected"
},
{
"version": "9.3(5)",
"status": "affected"
},
{
"version": "7.0(3)I7(9)",
"status": "affected"
},
{
"version": "9.3(6)",
"status": "affected"
},
{
"version": "10.1(2)",
"status": "affected"
},
{
"version": "10.1(1)",
"status": "affected"
},
{
"version": "9.3(5w)",
"status": "affected"
},
{
"version": "9.3(7)",
"status": "affected"
},
{
"version": "9.3(7k)",
"status": "affected"
},
{
"version": "7.0(3)I7(9w)",
"status": "affected"
},
{
"version": "10.2(1)",
"status": "affected"
},
{
"version": "9.3(7a)",
"status": "affected"
},
{
"version": "9.3(8)",
"status": "affected"
},
{
"version": "7.0(3)I7(10)",
"status": "affected"
},
{
"version": "10.2(1q)",
"status": "affected"
},
{
"version": "10.2(2)",
"status": "affected"
},
{
"version": "9.3(9)",
"status": "affected"
},
{
"version": "10.1(2t)",
"status": "affected"
},
{
"version": "10.2(3)",
"status": "affected"
},
{
"version": "10.2(3t)",
"status": "affected"
},
{
"version": "9.3(10)",
"status": "affected"
},
{
"version": "10.2(2a)",
"status": "affected"
},
{
"version": "10.3(1)",
"status": "affected"
},
{
"version": "10.2(4)",
"status": "affected"
},
{
"version": "10.3(2)",
"status": "affected"
},
{
"version": "9.3(11)",
"status": "affected"
},
{
"version": "10.3(3)",
"status": "affected"
},
{
"version": "10.2(5)",
"status": "affected"
},
{
"version": "9.3(12)",
"status": "affected"
},
{
"version": "10.2(3v)",
"status": "affected"
},
{
"version": "10.4(1)",
"status": "affected"
},
{
"version": "10.3(99w)",
"status": "affected"
},
{
"version": "10.2(6)",
"status": "affected"
},
{
"version": "10.3(3w)",
"status": "affected"
},
{
"version": "10.3(99x)",
"status": "affected"
},
{
"version": "10.3(3o)",
"status": "affected"
},
{
"version": "10.3(4)",
"status": "affected"
},
{
"version": "10.3(3p)",
"status": "affected"
},
{
"version": "10.3(4a)",
"status": "affected"
},
{
"version": "10.4(2)",
"status": "affected"
},
{
"version": "10.3(3q)",
"status": "affected"
},
{
"version": "9.3(13)",
"status": "affected"
},
{
"version": "10.3(5)",
"status": "affected"
},
{
"version": "10.2(7)",
"status": "affected"
},
{
"version": "10.4(3)",
"status": "affected"
},
{
"version": "10.3(3x)",
"status": "affected"
},
{
"version": "10.3(4g)",
"status": "affected"
},
{
"version": "10.5(1)",
"status": "affected"
},
{
"version": "10.2(8)",
"status": "affected"
},
{
"version": "10.3(3r)",
"status": "affected"
},
{
"version": "10.3(6)",
"status": "affected"
},
{
"version": "9.3(14)",
"status": "affected"
},
{
"version": "10.4(4)",
"status": "affected"
},
{
"version": "10.3(4h)",
"status": "affected"
},
{
"version": "10.5(2)",
"status": "affected"
},
{
"version": "10.3(7)",
"status": "affected"
},
{
"version": "10.4(5)",
"status": "affected"
},
{
"version": "10.5(3)",
"status": "affected"
},
{
"version": "10.2(9)",
"status": "affected"
},
{
"version": "9.3(15)",
"status": "affected"
},
{
"version": "10.4(4g)",
"status": "affected"
},
{
"version": "10.5(3t)",
"status": "affected"
},
{
"version": "10.5(3e)",
"status": "affected"
},
{
"version": "10.5(3o)",
"status": "affected"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System (Managed)",
"versions": [
{
"version": "4.0(4c)",
"status": "affected"
},
{
"version": "4.0(2b)",
"status": "affected"
},
{
"version": "4.1(2a)",
"status": "affected"
},
{
"version": "4.0(1a)",
"status": "affected"
},
{
"version": "4.0(2a)",
"status": "affected"
},
{
"version": "4.0(1b)",
"status": "affected"
},
{
"version": "4.1(1c)",
"status": "affected"
},
{
"version": "4.0(4a)",
"status": "affected"
},
{
"version": "4.0(4b)",
"status": "affected"
},
{
"version": "4.0(2e)",
"status": "affected"
},
{
"version": "4.1(1a)",
"status": "affected"
},
{
"version": "4.0(4d)",
"status": "affected"
},
{
"version": "4.0(4h)",
"status": "affected"
},
{
"version": "4.0(4g)",
"status": "affected"
},
{
"version": "4.0(1d)",
"status": "affected"
},
{
"version": "4.1(1e)",
"status": "affected"
},
{
"version": "4.0(4f)",
"status": "affected"
},
{
"version": "4.0(4e)",
"status": "affected"
},
{
"version": "4.0(4i)",
"status": "affected"
},
{
"version": "4.1(1d)",
"status": "affected"
},
{
"version": "4.0(2d)",
"status": "affected"
},
{
"version": "4.1(1b)",
"status": "affected"
},
{
"version": "4.0(1c)",
"status": "affected"
},
{
"version": "4.1(2b)",
"status": "affected"
},
{
"version": "4.0(4k)",
"status": "affected"
},
{
"version": "4.1(3a)",
"status": "affected"
},
{
"version": "4.1(3b)",
"status": "affected"
},
{
"version": "4.1(2c)",
"status": "affected"
},
{
"version": "4.0(4l)",
"status": "affected"
},
{
"version": "4.1(4a)",
"status": "affected"
},
{
"version": "4.1(3c)",
"status": "affected"
},
{
"version": "4.1(3d)",
"status": "affected"
},
{
"version": "4.2(1c)",
"status": "affected"
},
{
"version": "4.2(1d)",
"status": "affected"
},
{
"version": "4.0(4m)",
"status": "affected"
},
{
"version": "4.1(3e)",
"status": "affected"
},
{
"version": "4.2(1f)",
"status": "affected"
},
{
"version": "4.1(3f)",
"status": "affected"
},
{
"version": "4.2(1i)",
"status": "affected"
},
{
"version": "4.1(3h)",
"status": "affected"
},
{
"version": "4.2(1k)",
"status": "affected"
},
{
"version": "4.2(1l)",
"status": "affected"
},
{
"version": "4.0(4n)",
"status": "affected"
},
{
"version": "4.2(1m)",
"status": "affected"
},
{
"version": "4.1(3i)",
"status": "affected"
},
{
"version": "4.2(2a)",
"status": "affected"
},
{
"version": "4.2(1n)",
"status": "affected"
},
{
"version": "4.1(3j)",
"status": "affected"
},
{
"version": "4.2(2c)",
"status": "affected"
},
{
"version": "4.2(2d)",
"status": "affected"
},
{
"version": "4.2(3b)",
"status": "affected"
},
{
"version": "4.1(3k)",
"status": "affected"
},
{
"version": "4.0(4o)",
"status": "affected"
},
{
"version": "4.2(2e)",
"status": "affected"
},
{
"version": "4.2(3d)",
"status": "affected"
},
{
"version": "4.2(3e)",
"status": "affected"
},
{
"version": "4.2(3g)",
"status": "affected"
},
{
"version": "4.1(3l)",
"status": "affected"
},
{
"version": "4.3(2b)",
"status": "affected"
},
{
"version": "4.2(3h)",
"status": "affected"
},
{
"version": "4.2(3i)",
"status": "affected"
},
{
"version": "4.3(2c)",
"status": "affected"
},
{
"version": "4.1(3m)",
"status": "affected"
},
{
"version": "4.3(2e)",
"status": "affected"
},
{
"version": "4.3(3a)",
"status": "affected"
},
{
"version": "4.2(3j)",
"status": "affected"
},
{
"version": "4.3(3c)",
"status": "affected"
},
{
"version": "4.3(4a)",
"status": "affected"
},
{
"version": "4.2(3k)",
"status": "affected"
},
{
"version": "4.3(4b)",
"status": "affected"
},
{
"version": "4.3(4c)",
"status": "affected"
},
{
"version": "4.2(3l)",
"status": "affected"
},
{
"version": "4.3(4d)",
"status": "affected"
},
{
"version": "4.3(2f)",
"status": "affected"
},
{
"version": "4.2(3m)",
"status": "affected"
},
{
"version": "4.3(5a)",
"status": "affected"
},
{
"version": "4.3(4e)",
"status": "affected"
},
{
"version": "4.1(3n)",
"status": "affected"
},
{
"version": "4.3(4f)",
"status": "affected"
},
{
"version": "4.2(3n)",
"status": "affected"
},
{
"version": "4.3(5c)",
"status": "affected"
},
{
"version": "4.2(3o)",
"status": "affected"
},
{
"version": "4.3(5d)",
"status": "affected"
},
{
"version": "4.3(6a)",
"status": "affected"
},
{
"version": "4.3(6b)",
"status": "affected"
},
{
"version": "4.3(5e)",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
],
"providerMetadata": {
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco",
"dateUpdated": "2025-08-27T16:23:46.216Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-08-27T18:21:56.950775Z",
"id": "CVE-2025-20290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-08-27T18:23:36.610Z"
}
}
]
}
}