CVE-2022-20651

CVE-2022-20651 is a medium-severity vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) that allows an authenticated, local attacker to view sensitive information, specifically unencrypted credentials, in clear text. This vulnerability requires the ASDM to be deployed in a shared workstation environment. With a CVSS score of 5.5, exploitation involves local access and low attack complexity, potentially leading to the compromise of other users' credentials on the shared device. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has garnered some community discussion and media coverage.