CVE:CVE-2022-20680
CNNVD:CNNVD-202202-118
Cisco Prime Service Catalog（PSC）是美国思科（Cisco）公司的一套通过单一的门户网站提供所有IT服务的服务目录解决方案。该方案支持自动化订购计算、网络、存储和其他数据中心资源的统一服务目录。
Cisco Prime Service Catalog存在安全漏洞，远程攻击者可以通过访问web管理界面获取敏感信息。
solution:Upgrade cisco prime_service_catalog to a higher version than 12.0,12.1,12.1:patch10,12.1:patch11,12.1:patch12,12.1:patch13,12.1:patch14,12.1:patch15,12.1:patch16,12.1:patch17,12.1:patch2,12.1:patch3,12.1:patch4,12.1:patch6,12.1:patch7,12.1:patch8,12.1:patch9,and avoid the version (,12.0],12.1,12.1:patch10,12.1:patch11,12.1:patch12,12.1:patch13,12.1:patch14,12.1:patch15,12.1:patch16,12.1:patch17,12.1:patch2,12.1:patch3,12.1:patch4,12.1:patch6,12.1:patch7,12.1:patch8,12.1:patch9