CVE-2015-0673

Name of the Vulnerable Software and Affected Versions Cisco Mobility Services Engine (MSE) version 8.0(110.0)

Description The issue allows remote authenticated users to discover the passwords of arbitrary users. This can be achieved by either reading log files or using an unspecified GUI feature.

Recommendations For Cisco Mobility Services Engine (MSE) version 8.0(110.0), consider restricting access to log files and the unspecified GUI feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.