CVE-2019-15980 — Path Traversal in Cisco Data Center Network Manager
Severity
7.2HIGHNVD
EPSS
20.0%
top 4.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 6
Latest updateMay 24
Description
Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is agg…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9
Affected Packages2 packages
🔴Vulnerability Details
2🔍Detection Rules
1Suricata▶
ET EXPLOIT Cisco Data Center Network Manager Directory Traversal Inbound (CVE-2019-15980)↗2021-07-24