Cisco License Manager Software CVE-2017-12263 Directory Traversal Vulnerability

Bugtraq ID:	101169
Class:	Input Validation Error
CVE:	CVE-2017-12263
Remote:	Yes
Local:	No
Published:	Oct 04 2017 12:00AM
Updated:	Oct 04 2017 12:00AM
Credit:	rgod working with Trend Micro's Zero Day Initiative.
Vulnerable:	Cisco License Manager 3.2.6
Not Vulnerable:

Cisco License Manager Software CVE-2017-12263 Directory Traversal Vulnerability

Cisco License Manager Software is prone to a directory-traversal vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCvd83577.

Cisco License Manager Software CVE-2017-12263 Directory Traversal Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco License Manager Software CVE-2017-12263 Directory Traversal Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco License Manager Software CVE-2017-12263 Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco License Manager Directory Traversal Information Disclosure Vulnerability (Cisco)
  
• Cisco License Manager Server ReportCSV Directory Traversal Information Disclosur (Zero Day Initiative)