Cisco License Manager Server ReportCSV Directory Traversal (CVE-2017-12263)

An information disclosure vulnerability exists in Cisco License Manager Server. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ReportCSV servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to...