CVE-2019-1589

A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device. The vulnerability is due to a lack of proper data-protection mechanisms for disk encryption keys that are used within the partitions on an affected device hard drive. An attacker could exploit this vulnerability by obtaining physical access to the affected device to view certain cleartext keys. A successful exploit could allow the attacker to execute a custom boot process or conduct further attacks on an affected device.

• CWE-200
• CWE-311

• http://www.securityfocus.com/bid/108175Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-unmeasured-bootVendor Advisory
• http://www.securityfocus.com/bid/108175Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-unmeasured-bootVendor Advisory

Published

May 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15884Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15885Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15886Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15887Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15888Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15889The download-manager plugin before 2.9.94 for WordPress has …6.1
• CVE-2019-15890libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free …7.5
• CVE-2019-15891An issue was discovered in CKFinder through 2.6.2.1 and 3.x …5.3
• CVE-2019-15892An issue was discovered in Varnish Cache before 6.0.4 LTS, a…
• CVE-2019-15893Sonatype Nexus Repository Manager 2.x before 2.14.15 allows …7.2
• CVE-2019-15894An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x thro…6.8
• CVE-2019-15895search-exclude.php in the "Search Exclude" plugin before 1.2…7.5