CVE-2019-1731

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description The issue is related to errors in SSH key management in the Cisco NX-OS network operating system. It could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must have valid administrator device credentials. The vulnerability is due to incomplete error handling during SSH key export and import. A successful exploit could allow the attacker to expose a user's private SSH key or unintentionally import a passphrase-protected private SSH key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.