Cisco SD-WAN vManage Software Directory Traversal Vulnerability CVE-2020-26073 Scanner
Details
Stay Up To Date
Follow @secforeveryoneAsset Type
DOMAIN,IP,URL
Need Membership
Yes
Asset Verify
Yes
API Support
Yes
Estimate Time (Second)
30
Cisco SD-WAN vManage Software Directory Traversal Vulnerability CVE-2020-26073 Scanner Detail
Cisco SD-WAN vManage Software could allow a remote malicious user to traverse directories on the system, caused by improper validation of user request to application programmatic interfaces (APIs). An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to gain access to sensitive information.
Some Advice for Common Problems
Update your Cisco SD-WAN vManage Software, to the latest version to eliminate this vulnerability.
