CVE-2019-15980Path Traversal in Cisco Data Center Network Manager

CWE-22Path Traversal5 documents5 sources
Severity
7.2HIGHNVD
EPSS
20.0%
top 4.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 6
Latest updateMay 24

Description

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is agg

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

CVEListV5cisco/cisco_data_center_network_managerunspecifiedn/a

🔴Vulnerability Details

2
GHSA
GHSA-78x8-3xhw-vmmq: Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could al2022-05-24
CVEList
Cisco Data Center Network Manager Path Traversal Vulnerabilities2020-01-06

🔍Detection Rules

1
Suricata
ET EXPLOIT Cisco Data Center Network Manager Directory Traversal Inbound (CVE-2019-15980)2021-07-24

📋Vendor Advisories

1
Cisco
Cisco Data Center Network Manager Path Traversal Vulnerabilities2020-01-02
CVE-2019-15980 — Path Traversal in Cisco | cvebase