CVE-2013-5486

2013-09-2310:18:00

CWE-78

[email protected]

web.nvd.nist.gov

129

cve-2013-5486

directory traversal

vulnerability

dcnm-san server

cisco prime

data center network manager

bug ids

cscue77035

cscue77036

jboss autodeploy

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

JSON

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.

CPENameOperatorVersion
cisco:prime_data_center_network_managercisco prime data center network managereq5.0\(3\)
cisco:prime_data_center_network_managercisco prime data center network managereq6.1\(1a\)
cisco:prime_data_center_network_managercisco prime data center network managereq5.2\(2a\)
cisco:prime_data_center_network_managercisco prime data center network managereq4.1\(3\)
cisco:prime_data_center_network_managercisco prime data center network managereq5.1\(1\)
cisco:prime_data_center_network_managercisco prime data center network managereq4.1\(2\)
cisco:prime_data_center_network_managercisco prime data center network managereq5.2\(2e\)
cisco:prime_data_center_network_managercisco prime data center network managereq5.2\(2\)
cisco:prime_data_center_network_managercisco prime data center network managereq6.1\(1b\)
cisco:prime_data_center_network_managercisco prime data center network managereq5.2\(2b\)

CPE	Name	Operator	Version
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.0\(3\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	6.1\(1a\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.2\(2a\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	4.1\(3\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.1\(1\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	4.1\(2\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.2\(2e\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.2\(2\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	6.1\(1b\)
cisco:prime_data_center_network_manager	cisco prime data center network manager	eq	5.2\(2b\)