A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local…

Description

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would have to be authenticated as an administrative user to conduct this attack. The vulnerability is due to lack of proper masking of sensitive information in system log files. An attacker could exploit this vulnerability by authenticating to the targeted device and viewing the system log file. An exploit could allow the attacker to view sensitive system information that should have been restricted. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvg31472.

Scores

EPSS (exploitation in 30 days)

0.33% · top 74% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.0.

Weakness

• CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

• Cisco HyperFlex System

  • affected Cisco HyperFlex System

References (2)

• 101864 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-hyperflex (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2017-12315](https://trackcve.app/badge/CVE-2017-12315.svg)](https://trackcve.app/cve/CVE-2017-12315)

Record last updated 5 Aug 2024, 18:36 UTC.