Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability


Description   A vulnerability has been reported in Cisco Prime Data Center Network Manager, which can be exploited by malicious people to disclose potentially sensitive information.
For more information:
SA63779
The vulnerability is reported in versions 6.3(1) and later.
     
Vulnerable Products   Vulnerable Software:
Cisco Prime Data Center Network Manager (DCNM) 6.x
     
Solution   Upgrade to version 7.1(1).
     
CVE   CVE-2015-0666
     
References   Cisco (CSCus00241):
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
http://tools.cisco.com/security/center/viewAlert.x?alertId=37810
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Misc : Directory traversal - parameter starting with ../
3.2.0
Directory traversal using ..\..
3.2.0
Directory traversal
3.2.0
Directory traversal backward root folder
3.2.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2015-04-02 

 Target Type 
Server 

 Possible exploit 
Remote