CVE-2019-1820

🗓️ 16 May 2019 01:10:45Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

Cisco Prime Infrastructure and Cisco EPN Manager web interface allows unauthorized file acces

Reporter	Title	Published	Views	Family All 7
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability	15 May 201916:00	–	cisco
Cvelist	CVE-2019-1820 Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability	16 May 201901:10	–	cvelist
NVD	CVE-2019-1820	16 May 201901:29	–	nvd
Prion	Directory traversal	16 May 201901:29	–	prion
Positive Technologies	PT-2019-2411 · Cisco · Cisco Evolved Programmable Network (Epn) Manager +1	15 May 201900:00	–	ptsecurity
Source Incite	SRC-2019-0037 : Cisco Prime Infrastructure XmpMultiPathDownloadServlet Directory Traversal Information Disclosure Vulnerability	1 Feb 201900:00	–	srcincite
Vulnrichment	CVE-2019-1820 Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability	16 May 201901:10	–	vulnrichment

NVD

Node

cisco evolved_programmable_network_managerRange<3.0.1

cisco prime_infrastructureRange<3.4

[
  {
    "product": "Cisco Prime Infrastructure",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "3.4"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-pathtrav-1820
securityfocus	www.securityfocus.com/bid/108345

Parameter	Position	Path	Description	CWE
filename	query param	/XmpMultiPathDownloadServlet	Authenticated attacker can use directory traversal in filename parameter to disclose files outside allowed scope.	CWE-22

21 Nov 2024 04:37Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24

CVSS 3.16.5

CVSS 36.5

EPSS0.10719

SSVC

CWE-22