A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP request. An attacker could exploit this vulnerability by authenticating to the application and then sending a crafted HTTP request to the targeted application. A successful exploit could allow the authenticated attacker to issue commands on the underlying operating system as the root user.
Metrics
Affected Vendors & Products
References
History
Tue, 26 Nov 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2018-10-05T14:00:00Z
Updated: 2024-11-26T14:42:44.821Z
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0440
Vulnrichment
Updated: 2024-08-05T03:28:10.550Z
NVD
Status : Modified
Published: 2018-10-05T14:29:02.357
Modified: 2024-11-21T03:38:14.083
Link: CVE-2018-0440
Redhat
No data.