CVE-2018-0464Path Traversal in Cisco Data Center Network Manager

CWE-22Path Traversal4 documents4 sources
Severity
8.1HIGHNVD
EPSS
2.2%
top 15.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 5
Latest updateMay 13

Description

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker t

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-765j-3735-w74r: A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and2022-05-13
CVEList
Cisco Data Center Network Manager Path Traversal Vulnerability2018-10-05

📋Vendor Advisories

1
Cisco
Cisco Data Center Network Manager Path Traversal Vulnerability2018-08-28
CVE-2018-0464 — Path Traversal in Cisco | cvebase