VDB
CVE-2018-15407
CVE-2018-15407
PUBLISHED
CVSS 2.0999999046325684 LOW
A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerability by accessing the residual installation files on an affected system. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system.
EPSS 0.06% · 19.2th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.06%
19.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco HyperFlex HX-Series | n/a |
| cisco | hyperflex_hx_data_platform | 3.0\(1a\) |
Exploit Intelligence
Timeline
- Oct 5, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score