Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

Cisco Data Center Network Manager FileServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to read arbitrary files, and bypass authentication, on a system with vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fmserver servlet which i...

PT-2015-4793 · Cisco · Cisco Prime Data Center Network Manager

Name of the Vulnerable Software and Affected Versions: Cisco Prime Data Center Network Manager DCNM versions prior to 7.11 Description: The issue allows remote attackers to read arbitrary files via a crafted pathname. This is due to a directory traversal vulnerability in the fmserver servlet...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Cisco Prime Data Center Network Manager Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Cisc...

Cisco Data Center Network Manager fileUploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileUploadServlet. Multiple arguments of a multipart form reques...

Cisco Data Center Network Manager processImageSave_jsp Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processImageSavejsp servlet which contains an arbitrary file...

Cisco Data Center Network Manager downloadServlet Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. Without prior authentication, an attacker could...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in processImageSave.jsp, which can be abused through a directory traversal and a null byte injection to upload arbitrary files. The autodeploy JBoss application server feature is used to...