Cisco License Manager Server ReportCSV Directory Traversal (CVE-2017-12263)

An information disclosure vulnerability exists in Cisco License Manager Server. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ReportCSV servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to...

Cisco License Manager Software Directory Traversal Vulnerability

Cisco License Manager Software is a set of license management software from Cisco USA. The software is used to activate Cisco devices and software, and online access to device licenses or product keys. A directory traversal vulnerability exists in the web interface of Cisco License Manager...

CVE-2017-12263

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...

CVE-2017-12263

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...

Directory traversal

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...

CVE-2017-12263

The CVE-2017-12263 issue affects Cisco License Manager software, specifically its web interface and the ReportCSV servlet. The vulnerability stems from improper sanitization/validation of user-supplied file path parameters, enabling an unauthenticated remote attacker to perform directory traversa...

CVE-2017-12263

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...

CVE-2017-12263: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...

Cisco License Manager Directory Traversal Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application which should be restricted. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that...

Cisco License Manager Server ReportCSV Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco License Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReportCSV servlet, which listens on TCP port 8080 by default...

PT-2017-12438

Name of the Vulnerable Software and Affected Versions Cisco License Manager affected versions not specified Description The issue is a Directory Traversal vulnerability in the web interface, allowing an unauthenticated, remote attacker to download and view restricted files within the application...

CVE-2017-5571

CVE-2017-5571 is an open-redirect vulnerability in the lmadmin component of Flexera FlexNet Publisher (aka Flex License Manager) up to version 11.14.1, used in Citrix License Server for Windows and License Server VPX. The vulnerability could enable remote attackers to redirect users to attacker-c...

CVE-2016-8006

Authentication bypass vulnerability in Enterprise Security Manager ESM and License Manager LM in Intel Security McAfee Security Information and Event Management SIEM 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the...

CVE-2016-8006

The CVE-2016-8006 entry describes an authentication bypass in McAfee SIEM products, specifically Enterprise Security Manager (ESM) and License Manager (LM) used with SIEM 9.6.0 MR3. The vulnerability enables an administrator to modify other SIEM users’ information (including passwords) without su...

CVE-2016-8006: Undefined Security Weakness

Authentication bypass vulnerability in Enterprise Security Manager ESM and License Manager LM in Intel Security McAfee Security Information and Event Management SIEM 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8564

SQL injection vulnerability in Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8564

Siemens Automation License Manager (ALM) is affected by CVE-2016-8564 through SQL injection in ALM before 5.3 SP3 Update 1. an attacker can send crafted traffic to port 4410/TCP to execute arbitrary SQL commands that may read or modify configuration data. The issue stems from improper handling of...

SQL Injection Vulnerability in Siemens Automation License Manager

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A SQL injection vulnerability exists in Siemens Automation License Manager. A remote attacker can access port 4410/TCP to read and write ALM configuration information,...