cnvd - cnvd-2018-16702

cnvd-2018-16702

Vulnerability from cnvd

Title: Cisco Data Center Network Manager目录遍历漏洞

Description:

Cisco Data Center Network Manager是美国思科（Cisco）公司的一套数据中心管理系统。该系统适用于Cisco Nexus和MDS系列交换机，提供存储可视化、配置和故障排除等功能。

Cisco Data Center Network Manager存在目录遍历漏洞，该漏洞源于管理界面中的用户请求验证不当，攻击者可以通过在管理界面中发送包含目录遍历字符序列的恶意请求利用此漏洞在目标系统上查看或创建任意文件。

Severity: 高

Patch Name: Cisco Data Center Network Manager目录遍历漏洞的补丁

Patch Description:

Cisco Data Center Network Manager存在目录遍历漏洞，该漏洞源于管理界面中的用户请求验证不当，攻击者可以通过在管理界面中发送包含目录遍历字符序列的恶意请求利用此漏洞在目标系统上查看或创建任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

思科已发布了软件更新，请联系厂商下载更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal

Reference: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal

Impacted products

Name
Cisco Data Center Network Manager <11.0(1)

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0464"
    }
  },
  "description": "Cisco Data Center Network Manager\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\r\n\r\nCisco Data Center Network Manager\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7ba1\u7406\u754c\u9762\u4e2d\u7684\u7528\u6237\u8bf7\u6c42\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5728\u7ba1\u7406\u754c\u9762\u4e2d\u53d1\u9001\u5305\u542b\u76ee\u5f55\u904d\u5386\u5b57\u7b26\u5e8f\u5217\u7684\u6076\u610f\u8bf7\u6c42\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u67e5\u770b\u6216\u521b\u5efa\u4efb\u610f\u6587\u4ef6\u3002",
  "discovererName": "Tenable, Inc",
  "formalWay": "\u601d\u79d1\u5df2\u53d1\u5e03\u4e86\u8f6f\u4ef6\u66f4\u65b0\uff0c\u8bf7\u8054\u7cfb\u5382\u5546\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-16702",
  "openTime": "2018-08-29",
  "patchDescription": "Cisco Data Center Network Manager\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\r\n\r\nCisco Data Center Network Manager\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7ba1\u7406\u754c\u9762\u4e2d\u7684\u7528\u6237\u8bf7\u6c42\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5728\u7ba1\u7406\u754c\u9762\u4e2d\u53d1\u9001\u5305\u542b\u76ee\u5f55\u904d\u5386\u5b57\u7b26\u5e8f\u5217\u7684\u6076\u610f\u8bf7\u6c42\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u67e5\u770b\u6216\u521b\u5efa\u4efb\u610f\u6587\u4ef6\u3002\r\n\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Data Center Network Manager\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Data Center Network Manager \u003c11.0(1)"
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal",
  "serverity": "\u9ad8",
  "submitTime": "2018-08-29",
  "title": "Cisco Data Center Network Manager\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e"
}

CVE-2018-0464 (GCVE-0-2018-0464)

Vulnerability from cvelistv5

Published

2018-10-05 16:00

Modified

2024-11-26 14:26

Severity ?

CWE

CWE-22

Summary

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal	vendor-advisory, x_refsource_CISCO
	http://www.securitytracker.com/id/1041585	vdb-entry, x_refsource_SECTRACK
	https://www.tenable.com/security/research/tra-2018-20	x_refsource_MISC
	http://www.securityfocus.com/bid/105159	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Data Center Network Manager	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:28:10.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
          },
          {
            "name": "1041585",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041585"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2018-20"
          },
          {
            "name": "105159",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105159"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T18:50:40.803693Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T14:26:18.428Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Data Center Network Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-07T09:57:02",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
        },
        {
          "name": "1041585",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041585"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2018-20"
        },
        {
          "name": "105159",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105159"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20180828-dcnm-traversal",
        "defect": [
          [
            "CSCvj86072"
          ]
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Cisco Data Center Network Manager Path Traversal Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2018-08-28T21:00:00-0500",
          "ID": "CVE-2018-0464",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Data Center Network Manager Path Traversal Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Data Center Network Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "8.1",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
            },
            {
              "name": "1041585",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041585"
            },
            {
              "name": "https://www.tenable.com/security/research/tra-2018-20",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2018-20"
            },
            {
              "name": "105159",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105159"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20180828-dcnm-traversal",
          "defect": [
            [
              "CSCvj86072"
            ]
          ],
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0464",
    "datePublished": "2018-10-05T16:00:00Z",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-11-26T14:26:18.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted