CVE-2018-0464CWE-22

Cisco Data Center Network Manager Path Traversal Vulnerability

published October 5, 2018

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05406 · 92.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2018-10-05T16:00Z
EPSS history
Timeline
  • 05 OCT 16:00Z
    Cisco Data Center Network Manager Path Traversal Vulnerability
    cvelistv5