CVE-2019-15980

🗓️ 06 Jan 2020 07:45:45Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

Vulnerabilities in Cisco DCNM allow directory traversal attacks. Admin privileges required.

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2019-15980	19 Mar 202415:16	–	circl
Cisco	Cisco Data Center Network Manager Path Traversal Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager REST API Path Traversal Vulnerability	3 Jan 202000:00	–	cnvd
Check Point Advisories	Cisco Data Center Network Manager Directory Traversal (CVE-2019-15980)	19 Apr 202000:00	–	checkpoint_advisories
Cvelist	CVE-2019-15980 Cisco Data Center Network Manager Path Traversal Vulnerabilities	6 Jan 202007:45	–	cvelist
NVD	CVE-2019-15980	6 Jan 202008:15	–	nvd
Prion	Directory traversal	6 Jan 202008:15	–	prion
Source Incite	SRC-2020-0002 : Cisco Data Center Network Manager ConfigArchiveRest importConfiguration Directory Traversal Denial of Service Vulnerability	29 Aug 201900:00	–	srcincite
Source Incite	SRC-2020-0007 : Cisco Data Center Network Manager SystemFileDAO deleteFile Directory Traversal Denial of Service Vulnerability	20 Nov 201900:00	–	srcincite

NVD

Node

cisco data_center_network_managerRange<11.3(1)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav

Parameter	Position	Path	Description	CWE
path	nested	/saveSystemData	Path traversal via saveFile path parameter leading to arbitrary file write in DCNM (CWE-22)	CWE-22

21 Nov 2024 04:29Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.20045

SSVC

CWE-22