CVE-2022-20630

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploit this vulnerability by accessing the audit logs through the CLI. A successful exploit could allow the attacker to retrieve sensitive information that includes user credentials.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Feb 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-206316.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206326.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct an XSS atCVE-2022-206335.3A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a usernamCVE-2022-206346.1A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to redirect a user tCVE-2022-206356.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206366.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206376.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206386.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206396.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-20648.8Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.CVE-2022-206406.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to CVE-2022-206416.1Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to
CVE-2022-20630: Medium severity, CVSS 4.4 | Vulnix