A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. A successful exploit could allow the attacker to view application files that may contain sensitive information.
Metrics
Affected Vendors & Products
References
History
Thu, 21 Nov 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2019-05-16T01:10:58.191024Z
Updated: 2024-11-21T19:24:42.824Z
Reserved: 2018-12-06T00:00:00
Link: CVE-2019-1818
Vulnrichment
Updated: 2024-08-04T18:28:42.877Z
NVD
Status : Modified
Published: 2019-05-16T01:29:00.297
Modified: 2024-11-21T04:37:26.773
Link: CVE-2019-1818
Redhat
No data.