Cisco Data Center Network Manager processImageSave_jsp Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processImageSavejsp servlet which contains an arbitrary file...

Cisco Data Center Network Manager downloadServlet Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. Without prior authentication, an attacker could...

Cisco Prime Data Center Network Manager < 6.2(1) Multiple Vulnerabilities (credentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by multiple vulnerabilities : - Multiple remote command execution vulnerabilities exist in the DCNM-SAN Server component. CVE-2013-5486 - An...

Cisco Prime Data Center Network Manager < 6.2(1) Multiple Vulnerabilities (uncredentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by multiple vulnerabilities : - Multiple remote command execution vulnerabilities exist in the DCNM-SAN Server component. CVE-2013-5486 - An...

CVE-2013-5487

DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029...

CVE-2013-5486

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

Design/Logic Flaw

DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029...

CVE-2013-5486

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

CVE-2013-5487

CVE-2013-5487 affects Cisco Prime Data Center Network Manager (DCNM) DCNM-SAN Server prior to version 6.2(1). The vulnerability permits remote attackers to read arbitrary files. Root cause cited in multiple sources is insecure DownloadServlet handling (lack of authentication and insufficient inpu...

CVE-2013-5486

Cisco Prime DCNM DCNM-SAN Server (Cisco Prime DCNM) before 6.2(1) is affected by CVE-2013-5486: a directory traversal in processImageSave.jsp allows remote attackers to write arbitrary files via the chartid parameter, potentially enabling remote code execution through JBoss autodeploy. Affected c...

CVE-2013-5490

Cisco Prime DCNM (DCNM) versions prior to 6.2(1) are affected by CVE-2013-5490 due to an XML External Entity (XXE) vulnerability. An unauthenticated, remote attacker could exploit the XXE flaw to read arbitrary text files on the affected system. This issue is part of a set of vulnerabilities disc...

CVE-2013-5486: Improper Neutralization of Special Elements used in an OS Command

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute...

CVE-2013-5490: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCud80148...

CVE-2013-5487: Exposure of Sensitive Information to an Unauthorized Actor

DCNM-SAN Server in Cisco Prime Data Center Network Manager DCNM before 6.21 allows remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCue77029...

PT-2013-5571

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager versions prior to 6.21 Description The issue allows remote attackers to write arbitrary files via the chartid parameter in the processImageSave.jsp file. This can be leveraged to execute arbitrary comman...

PT-2013-5572

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager versions prior to 6.21 Description The issue allows remote attackers to read arbitrary files via unspecified vectors. Recommendations For versions prior to 6.21, update to version 6.21 or later to resolv...

Cisco Prime Data Center Network Manager Arbitrary File Upload

This module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in processImageSave.jsp, which can be abused through a directory traversal and a null byte injection to upload arbitrary files. The autodeploy JBoss application server feature is used to...

Cisco Prime Data Center Network Manager Installed (Linux)

Cisco Prime Data Center Network Manager DCNM is installed on the remote host. DCNM is used to manage virtualized data centers. TRUSTED...

Cisco Prime Data Center Network Manager Installed (Windows)

Cisco Prime Data Center Network Manager DCNM is installed on the remote host. DCNM is used to manage virtualized data centers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67245; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

Cisco Prime Data Center Network Manager RMI Remote Code Execution (uncredentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a remote code execution vulnerability. Unauthorized users have access to the JBoss Application Server Remote Method Invocation services. A remote,...