CVE-2019-1657— Cisco AMP Threat Grid API Key Information Disclosure Vulnerability

Cisco AMP Threat Grid API Key Information Disclosure Vulnerability

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected device. An exploit could allow the attacker to gain unauthorized access to information by using the API key credentials.

N/A

信息暴露

Cisco AMP Threat Grid Cloud和AMP Threat Grid Appliance software 信任管理问题漏洞

Cisco AMP Threat Grid是美国思科（Cisco）公司的套集成了静态和动态恶意软件分析以及威胁情报于一体的解决方案。该方案可帮助企业分析恶意软件的行为和意图、威胁的影响程度以及防御方法等。 Cisco AMP Threat Grid Cloud 3.5.68之前版本和AMP Threat Grid Appliance software 2.5之前版本中存在信任管理问题漏洞，该漏洞源于程序没有安全地创建API密钥。远程攻击者可通过使用不安全的凭证利用该漏洞访问敏感信息。

N/A

N/A