Vulnslist

find the latest Cisco vulnerabilities

Cisco Enterprise NFV Infrastructure Software Web Management Interface Path Traversal Vulnerability

cisco-sa-20180516-nfvis-path-traversal · Medium · Published · Updated

A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request parameters. An attacker who has access to the web management interface of the affected application could exploit this vulnerability by sending a malicious web request to the affected device. A successful exploit could allow the attacker to access sensitive information on the affected system. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis-path-traversal

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2018-0323
Cisco Bug IDsCSCvh99631
CVSS ScoreBase 6.5
Base 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Enterprise NFV Infrastructure Software

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Enterprise NFV Infrastructure Software known_affected cisco_csaf CVE-2018-0323 1

Related Products

Product CVE Evidence
Cisco Enterprise NFV Infrastructure Software CVE-2018-0323 Cisco OpenVuln