CVE-2017-12289

A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attacker to display sensitive IPsec information in the system log file. The vulnerability is due to incorrect implementation of IPsec conditional, verbose debug logging that causes sensitive information to be written to the log file. This information should be restricted. An attacker who has valid administrative credentials could exploit this vulnerability by authenticating to the device and enabling conditional, verbose debug logging for IPsec and viewing the log file. An exploit could allow the attacker to access sensitive information related to the IPsec configuration. Cisco Bug IDs: CSCvf12081.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/101509Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039628Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe1Vendor Advisory
• http://www.securityfocus.com/bid/101509Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039628Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171018-cisco-ios-xe1Vendor Advisory

Published

Oct 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12283A vulnerability in the handling of 802.11w Protected Managem…
• CVE-2017-12284A vulnerability in the web interface of Cisco Jabber for Win…
• CVE-2017-12285A vulnerability in the web interface of Cisco Network Analys…
• CVE-2017-12286A vulnerability in the web interface of Cisco Jabber could a…
• CVE-2017-12287A vulnerability in the cluster database (CDB) management com…
• CVE-2017-12288A vulnerability in the web-based management interface of Cis…
• CVE-2017-1229IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could a…
• CVE-2017-12290Multiple vulnerabilities in the web interface of the Cisco R…
• CVE-2017-12291Multiple vulnerabilities in the web interface of the Cisco R…
• CVE-2017-12292Multiple vulnerabilities in the web interface of the Cisco R…
• CVE-2017-12293A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2017-12294A vulnerability in Cisco WebEx Meetings Server could allow a…