cisco-sa-nfvis-path-emy79OC2: Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability
A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. The vulnerability is due to a flaw in the logic that governs directory permissions. An attacker could exploit this vulnerability by using capabilities that are not controlled by the role-based access control (RBAC) mechanisms of the software. A successful exploit could allow the attacker to overwrite files on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-path-emy79OC2
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-nfvis-path-emy79OC2?
The severity of cisco-sa-nfvis-path-emy79OC2 is considered high due to its potential impact on system security.
How do I fix cisco-sa-nfvis-path-emy79OC2?
To fix cisco-sa-nfvis-path-emy79OC2, update your Cisco Enterprise NFV Infrastructure Software to the latest version provided by Cisco.
Who is affected by cisco-sa-nfvis-path-emy79OC2?
Cisco Enterprise NFV Infrastructure Software users are affected by the cisco-sa-nfvis-path-emy79OC2 vulnerability.
What type of attack can be performed due to cisco-sa-nfvis-path-emy79OC2?
An authenticated remote attacker can perform a directory traversal attack due to cisco-sa-nfvis-path-emy79OC2.
Is user authentication required to exploit cisco-sa-nfvis-path-emy79OC2?
Yes, user authentication is required to exploit the cisco-sa-nfvis-path-emy79OC2 vulnerability.