Cisco Data Center Network Manager CVE-2015-0666 Directory Traversal Vulnerability

Bugtraq ID:	73479
Class:	Input Validation Error
CVE:	CVE-2015-0666
Remote:	Yes
Local:	No
Published:	Apr 01 2015 12:00AM
Updated:	May 07 2015 05:27PM
Credit:	Cisco
Vulnerable:	Cisco Prime Data Center Network Manager (DCNM) 7.0(2) Cisco Prime Data Center Network Manager (DCNM) 7.0(1) Cisco Prime Data Center Network Manager (DCNM) 6.3(2) Cisco Prime Data Center Network Manager (DCNM) 6.3(1)
Not Vulnerable:	Cisco Prime Data Center Network Manager (DCNM) 7.1(1)

Cisco Data Center Network Manager CVE-2015-0666 Directory Traversal Vulnerability

Cisco Data Center Network Manager is prone to a directory-traversal vulnerability.

Exploiting this issue can allow an attacker to gain read access to arbitrary files. Information harvested may aid in launching further attacks.

This issue is being tracked by Cisco Bug ID CSCus00241.

Cisco Data Center Network Manager CVE-2015-0666 Directory Traversal Vulnerability

An attacker can exploit this issue using a web browser.

Cisco Data Center Network Manager CVE-2015-0666 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Data Center Network Manager CVE-2015-0666 Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Data Center Network Manager Directory Traversal Vulnerability (Cisco)
  
• Cisco Data Center Network Manager FileServlet Information Disclosure Vulnerabili (TippingPoint Zero Day Initiative)
  
• Cisco Prime Data Center Network Manager File Information Disclosure Vulnerabilit (Cisco)