CVE-2018-0464: Cisco Data Center Network Manager Path Traversal Vulnerability
A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0464?
CVE-2018-0464 is a vulnerability in Cisco Data Center Network Manager software that allows an authenticated remote attacker to conduct directory traversal attacks and gain access to sensitive files.
What is the severity of CVE-2018-0464?
CVE-2018-0464 has a severity rating of 8.1 (high).
Which software versions are affected by CVE-2018-0464?
Cisco Prime Data Center Network Manager versions 6.3(1), 6.3(2), 7.0(1), 7.0(2), 7.1(1), 10.0, 10.1, 10.2, and 10.3(1) are affected by CVE-2018-0464.
How can an attacker exploit CVE-2018-0464?
An attacker can exploit CVE-2018-0464 by sending specially crafted requests to the management interface of the targeted system.
Where can I find more information about CVE-2018-0464?
More information about CVE-2018-0464 can be found on the following websites: SecurityFocus, SecurityTracker, and Cisco's Security Advisory.