Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)

A directory traversal vulnerability exists in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveWindowsNetworkConfig method...

CVE-2020-3249

Cisco UCS Director and Cisco UCS Director Express for Big Data REST API vulnerabilities (CVE-2020-3249 and related CVEs) allow remote attackers to bypass authentication or perform directory traversal due to insufficient input validation in REST endpoints. Connected advisories pin the root cause t...