CVE-2022-20651

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited. This vulnerability is due to the storage of unencrypted credentials in certain logs. An attacker could exploit this vulnerability by accessing the logs on an affected system. A successful exploit could allow the attacker to view the credentials of other users of the shared device.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Jun 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-206526.5A vulnerability in the web-based management interface and in the API subsystem of Cisco Tetration could allow an authenticated, remote CVE-2022-206537.5A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco EmCVE-2022-206546.1A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-sCVE-2022-206558.8A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform aCVE-2022-206566.5A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to CVE-2022-206576.1A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker tCVE-2022-206589.6A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified ConCVE-2022-206596.1A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager couCVE-2022-20666.1Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06.CVE-2022-206604.6A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker tCVE-2022-206614.6Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attackCVE-2022-206626.8A vulnerability in the smart card login authentication of Cisco Duo for macOS could allow an unauthenticated attacker with physical access t
CVE-2022-20651: Medium severity, CVSS 5.5 | Vulnix