cisco-sa-20180516-nfvis-path-traversal: Cisco Enterprise NFV Infrastructure Software Web Management Interface Path Traversal Vulnerability
A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request parameters. An attacker who has access to the web management interface of the affected application could exploit this vulnerability by sending a malicious web request to the affected device. A successful exploit could allow the attacker to access sensitive information on the affected system.
There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis-path-traversal
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20180516-nfvis-path-traversal?
The severity of cisco-sa-20180516-nfvis-path-traversal is considered high due to the potential for unauthorized access to sensitive system data.
How do I fix cisco-sa-20180516-nfvis-path-traversal?
Fixing cisco-sa-20180516-nfvis-path-traversal involves applying the recommended patches provided by Cisco for the affected software.
Who is affected by cisco-sa-20180516-nfvis-path-traversal?
Cisco Enterprise NFV Infrastructure Software users are primarily affected by cisco-sa-20180516-nfvis-path-traversal.
What type of attack does cisco-sa-20180516-nfvis-path-traversal enable?
cisco-sa-20180516-nfvis-path-traversal enables an authenticated, remote attacker to perform a path traversal attack.
Is authentication required to exploit cisco-sa-20180516-nfvis-path-traversal?
Yes, exploitation of cisco-sa-20180516-nfvis-path-traversal requires authentication to the web management interface.