cnvd - cnvd-2020-19239

cnvd-2020-19239

Vulnerability from cnvd

Title: Cisco Data Center Network Manager路径遍历漏洞

Description:

Cisco Data Center Network Manager（DCNM）是美国思科（Cisco）公司的一套数据中心管理系统。该系统适用于Cisco Nexus和MDS系列交换机，提供存储可视化、配置和故障排除等功能。

Cisco DCNM 11.3(1)之前版本中的Application Framework功能存在路径遍历漏洞，该漏洞源于程序未能充分验证发送到Application Framework端点的用户输入。远程攻击者可通过发送特制的请求利用该漏洞以管理权限在系统中读取，编写或执行任意文件。

Severity: 高

Patch Name: Cisco Data Center Network Manager Application Framework目录遍历漏洞的补丁

Patch Description:

Cisco Data Center Network Manager是数据中心的网络管理解决方案。

Cisco Data Center Network Manager Application Framework存在目录遍历漏洞，Cisco DCNM的Application Framework中的漏洞可能允许通过身份验证，攻击者可利用该漏洞在受影响的设备上执行任目录遍历攻击，执行读写等操作。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布相关漏洞补丁链接，请及时更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav

Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-15982

Impacted products

Name
Cisco Cisco Data Center Analytics Framework < 11.3(1)

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-15982",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-15982"
    }
  },
  "description": "Cisco Data Center Network Manager\uff08DCNM\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\n\nCisco DCNM 11.3(1)\u4e4b\u524d\u7248\u672c\u4e2d\u7684Application Framework\u529f\u80fd\u5b58\u5728\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u9a8c\u8bc1\u53d1\u9001\u5230Application Framework\u7aef\u70b9\u7684\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5\u7ba1\u7406\u6743\u9650\u5728\u7cfb\u7edf\u4e2d\u8bfb\u53d6\uff0c\u7f16\u5199\u6216\u6267\u884c\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u76f8\u5173\u6f0f\u6d1e\u8865\u4e01\u94fe\u63a5\uff0c\u8bf7\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-19239",
  "openTime": "2020-03-25",
  "patchDescription": "Cisco Data Center Network Manager\u662f\u6570\u636e\u4e2d\u5fc3\u7684\u7f51\u7edc\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nCisco Data Center Network Manager Application Framework\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0cCisco DCNM\u7684Application Framework\u4e2d\u7684\u6f0f\u6d1e\u53ef\u80fd\u5141\u8bb8\u901a\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u4e0a\u6267\u884c\u4efb\u76ee\u5f55\u904d\u5386\u653b\u51fb\uff0c\u6267\u884c\u8bfb\u5199\u7b49\u64cd\u4f5c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Data Center Network Manager Application Framework\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Cisco Data Center Analytics Framework \u003c 11.3(1)"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-15982",
  "serverity": "\u9ad8",
  "submitTime": "2020-01-03",
  "title": "Cisco Data Center Network Manager\u8def\u5f84\u904d\u5386\u6f0f\u6d1e"
}

CVE-2019-15982 (GCVE-0-2019-15982)

Vulnerability from cvelistv5

Published

2020-01-06 07:45

Modified

2024-11-15 17:51

Severity ?

7.2 (High) - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-22

Summary

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav	vendor-advisory, x_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Data Center Network Manager	Version: unspecified < n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:03:32.629Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-15982",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-15T16:25:23.627768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-15T17:51:37.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Data Center Network Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "n/a",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2020-01-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-06T07:45:35",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20200102-dcnm-path-trav",
        "defect": [
          [
            "CSCvq85957",
            "CSCvq85972",
            "CSCvq85998",
            "CSCvq89422",
            "CSCvq89834",
            "CSCvq89841",
            "CSCvq89878",
            "CSCvq89895",
            "CSCvr05463",
            "CSCvr17970",
            "CSCvr44896",
            "CSCvr46508",
            "CSCvr79240",
            "CSCvs16318",
            "CSCvs16341",
            "CSCvs16350"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Data Center Network Manager Path Traversal Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2020-01-02T16:00:00-0800",
          "ID": "CVE-2019-15982",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Data Center Network Manager Path Traversal Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Data Center Network Manager",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "7.2",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20200102-dcnm-path-trav",
          "defect": [
            [
              "CSCvq85957",
              "CSCvq85972",
              "CSCvq85998",
              "CSCvq89422",
              "CSCvq89834",
              "CSCvq89841",
              "CSCvq89878",
              "CSCvq89895",
              "CSCvr05463",
              "CSCvr17970",
              "CSCvr44896",
              "CSCvr46508",
              "CSCvr79240",
              "CSCvs16318",
              "CSCvs16341",
              "CSCvs16350"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-15982",
    "datePublished": "2020-01-06T07:45:35.686907Z",
    "dateReserved": "2019-09-06T00:00:00",
    "dateUpdated": "2024-11-15T17:51:37.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted