Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
oryginał ENAV:N/AC:L/Au:N/C:C/I:C/A:CCisco Prime Data Center Network Manager
APPCisco4.1\(2\)4.1\(3\)4.1\(4\)4.1\(5\)4.2\(1\)4.2\(3\)5.0\(2\)5.0\(3\)5.1\(1\)5.1\(2\)5.1\(3u\)5.2\(2\)5.2\(2a\)5.2\(2b\)5.2\(2c\)+ 4 więcej
Powiązane podatności
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote ...
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, rem...
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manag...
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) be...
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to...