The vulnerability of the reporting software for Cisco Security Manager extended security environments lies in improper pathname restrictions, which allow attackers to gain unauthorized access to protected information or to modify, add, or delete data.

Cisco Security Manager environments have a pathname restriction flaw that enables unauthorized access or data changes.

Reporter	Title	Published	Views	Family All 21
ATTACKERKB	CVE-2020-27130	16 Nov 202023:00	–	attackerkb
Circl	CVE-2020-27130	17 Nov 202007:38	–	circl
Cisco	Cisco Security Manager Path Traversal Vulnerability	16 Nov 202023:00	–	cisco
Tenable Nessus	Cisco Security Manager < 4.22 Path Traversal (cisco-sa-csm-path-trav-NgeRnqgR)	17 Nov 202000:00	–	nessus
Tenable Nessus	Cisco Security Manager < 4.23 Path Traversal Vulnerability (direct check)	24 Nov 202000:00	–	nessus
CNNVD	Cisco Security Manager 安全漏洞	16 Nov 202000:00	–	cnnvd
CNVD	Cisco Security Manager Path Traversal Vulnerability	18 Nov 202000:00	–	cnvd
Check Point Advisories	YSoSerial Payloads Remote Code Execution (CVE-2020-11518; CVE-2020-27130; CVE-2022-29936)	16 Mar 202000:00	–	checkpoint_advisories
CVE	CVE-2020-27130	17 Nov 202003:10	–	cve
Cvelist	CVE-2020-27130 Cisco Security Manager Path Traversal Vulnerability	17 Nov 202003:10	–	cvelist