CVE-2019-1586

CVE-2019-1586 describes a vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software where insecure removal of cleartext encryption keys from local hard drive partitions allows an unauthenticated, local attacker with physical access to retrieve sensitive information. The vulnerability has a CVSS score of 4.6 (Medium), indicating a physical attack vector with low complexity, leading to high confidentiality impact. While the EPSS and FAUCET scores are low, successful exploitation could lead to the disclosure of confidential data. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.