CVE-2019-1619

🗓️ 27 Jun 2019 03:00:29Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 164 Views🌐 WEB

Cisco DCNM web interface authentication bypass vulnerabilit

Reporter	Title	Published	Views	Family All 19
0day.today	Cisco Data Center Network Manager 11.1(1) Remote Code Execution Exploit	8 Jul 201900:00	–	zdt
0day.today	Cisco Data Center Network Manager Unauthenticated Remote Code Execution Exploit	2 Sep 201900:00	–	zdt
BDU FSTEC	The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to perform arbitrary actions on a vulnerable device with administrator privileges.	4 Jul 201900:00	–	bdu_fstec
Circl	CVE-2019-1619	30 Jun 201914:49	–	circl
Cisco	Cisco Data Center Network Manager Authentication Bypass Vulnerability	26 Jun 201916:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager < 11.1(1) Authentication Bypass Vulnerability	12 Jul 201900:00	–	nessus
CNVD	Cisco Data Center Network Manager Authentication Bypass Vulnerability	27 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-1619 Cisco Data Center Network Manager Authentication Bypass Vulnerability	27 Jun 201903:00	–	cvelist
Exploit DB	Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)	3 Sep 201900:00	–	exploitdb
Metasploit	Cisco Data Center Network Manager Unauthenticated File Download	22 Jun 202010:11	–	metasploit

NVD

Node

cisco data_center_network_managerMatch10.4(2)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "11.1(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/108902
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-bypass
seclists	www.seclists.org/bugtraq/2019/Jul/11
packetstormsecurity	www.packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2019/Jul/7

Parameter	Position	Path	Description	CWE
token	query param	fm/pmreport	Authentication bypass via crafted token enabling unauthorized access (CVE-2019-1619).	CWE-284, CWE-798
fname	binary	fm/fileUpload	Unauthenticated file upload leading to remote code execution by uploading a WAR to Tomcat (CVE-2019-1619/CVE-2019-1620).	CWE-284, CWE-798
uploadDir	binary	fm/fileUpload	Unauthenticated file upload leading to remote code execution by uploading a WAR to Tomcat (CVE-2019-1619/CVE-2019-1620).	CWE-284, CWE-798
payload	binary	fm/fileUpload	Unauthenticated file upload leading to remote code execution by uploading a WAR to Tomcat (CVE-2019-1619/CVE-2019-1620).	CWE-284, CWE-798
jboss*.log	nested	fm/log/fmlogs.zip	Using logs to locate deployment path for WAR upload (information disclosure vector related to DCNM vulnerability).	CWE-284, CWE-798

17 Jun 2026 02:28Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 3.19.8

CVSS 39.8

EPSS0.82815

SSVC