CVE-2020-3484: Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability
First published: Wed Aug 26 2020(Updated: )
A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to view potentially sensitive information on the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Vision Dynamic Signage Director | =6.2\(0\)-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-3484?
CVE-2020-3484 has a medium severity rating due to its potential to expose sensitive information.
How do I fix CVE-2020-3484?
To fix CVE-2020-3484, update Cisco Vision Dynamic Signage Director to the latest patched version.
What are the consequences of exploiting CVE-2020-3484?
Exploiting CVE-2020-3484 could allow an unauthenticated attacker to access sensitive information on the affected device.
Which versions are affected by CVE-2020-3484?
CVE-2020-3484 affects Cisco Vision Dynamic Signage Director version 6.2(0)-sp2.
Is authentication required to exploit CVE-2020-3484?
No, CVE-2020-3484 can be exploited by an unauthenticated, remote attacker.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/references
- agent/title
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- vendor/cisco
- canonical/cisco vision dynamic signage director
- version/cisco vision dynamic signage director/6.2\(0\)-sp2