Cisco Prime Network Analysis Module Graph Directory Traversal (CVE-2017-12285)

A directory traversal vulnerability exists in the Cisco Prime Network Analysis Module. The vulnerability is due to the way Cisco Prime Network Analysis Module handles input validation. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted packet to the target...

CVE-2017-12285

CVE-2017-12285 affects Cisco Network Analysis Module (NAM) web interface. The issue is a directory traversal vulnerability caused by improper input validation and lack of RBAC on HTTP URLs, allowing an unauthenticated, remote attacker to delete arbitrary files via a crafted request. Multiple advi...