Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Description
A vulnerability has been reported in Cisco Prime Data Center Network Manager, which can be exploited by malicious people to disclose potentially sensitive information.
Certain input passed to the fmserver servlet is not properly verified before being used to display files. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences and subsequently e.g. bypass the web-based authentication.
The vulnerability is reported in versions prior to 7.1(1).
Vulnerable Products
Vulnerable Software: Cisco Prime Data Center Network Manager (DCNM) 7.x
