deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-5496
Published: 2020-01-03
Description: FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00041.html; https://github.com/fontforge/fontforge/issues/4085; https://lists.debian.org/debian-lts-announce/2024/03/msg00007.html
CVE: CVE-2019-13765
Published: 2020-01-03
Description: Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-665, CWE-787
References: https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html; https://crbug.com/1007194; https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html
CVE: CVE-2019-13766
Published: 2020-01-03
Description: Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html; https://crbug.com/989969; https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html
CVE: CVE-2019-3768
Published: 2020-01-03
Description: RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause information disclosure of local system files by supplying specially crafted XML message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software-XML-Entity-Injection-Vulnerability; https://www.dell.com/support/security/en-us/details/DOC-108320/DSA-2019-148-RSA&#174%3B-Authentication-Manager-Software-XML-Entity-Injection-Vulnerability
CVE: CVE-2019-5844
Published: 2020-01-03
Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html
CVE: CVE-2019-5845
Published: 2020-01-03
Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html
CVE: CVE-2019-5846
Published: 2020-01-03
Description: Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00007.html
CVE: CVE-2020-5497
Published: 2020-01-04
Description: The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Feb/25; https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1521
CVE: CVE-2015-9540
Published: 2020-01-04
Description: Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-18-2015-05-02-Low-Moderate-risk-URL-hijackingspoofing; https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-18-2015-05-02-Low-Moderate-risk-URL-hijackingspoofing
CVE: CVE-2019-20334
Published: 2020-01-04
Description: In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392548#c4; https://bugzilla.nasm.us/show_bug.cgi?id=3392638; https://bugzilla.nasm.us/show_bug.cgi?id=3392548#c4
CVE: CVE-2020-5499
Published: 2020-01-04
Description: Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/wssgcsc58/CVEs/tree/master/baidurustsgxsdk_enclaveid_race; https://github.com/wssgcsc58/CVEs/tree/master/baidurustsgxsdk_enclaveid_race
CVE: CVE-2019-19312
Published: 2020-01-05
Description: GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.
CVSS Score: 5.8 (MEDIUM)
References: https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/; https://about.gitlab.com/blog/categories/releases/; https://gitlab.com/gitlab-org/gitlab/issues/28802
CVE: CVE-2019-19313
Published: 2020-01-05
Description: GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible to create, edit, or view issues and commits.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/; https://about.gitlab.com/blog/categories/releases/; https://gitlab.com/gitlab-org/gitlab/issues/14947
CVE: CVE-2019-19314
Published: 2020-01-05
Description: GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/; https://about.gitlab.com/blog/categories/releases/; https://gitlab.com/gitlab-org/gitlab/issues/32381
CVE: CVE-2019-19628
Published: 2020-01-05
Description: In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/
CVE: CVE-2019-19629
Published: 2020-01-05
Description: In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.
CVSS Score: 7.5 (HIGH)
References: https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/blog/2019/12/10/critical-security-release-gitlab-12-5-4-released/
CVE: CVE-2019-19911
Published: 2020-01-05
Description: There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DUMIBUYGJRAVJCTFUWBRLVQKOUTVX5P/; https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html; https://usn.ubuntu.com/4272-1/
CVE: CVE-2019-20336
Published: 2020-01-05
Description: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Mad-robot/CVE-List/blob/master/Advanced%20Real%20Estate%20Script.md; https://github.com/Mad-robot/CVE-List/blob/master/Advanced%20Real%20Estate%20Script.md
CVE: CVE-2019-20337
Published: 2020-01-05
Description: In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Mad-robot/CVE-List/blob/master/Advanced%20Real%20Estate%20Script.md; https://github.com/Mad-robot/CVE-List/blob/master/Advanced%20Real%20Estate%20Script.md
CVE: CVE-2019-20004
Published: 2020-01-05
Description: An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: http://en.intelbras.com.br/downloads; https://medium.com/%40rsantos_14778/remote-control-cve-2019-20004-21f77e976715; http://en.intelbras.com.br/downloads
CVE: CVE-2019-20077
Published: 2020-01-05
Description: The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://fatihhcelik.blogspot.com/2019/12/typesetter-cms-51-logout-csrf_30.html; https://fatihhcelik.blogspot.com/2019/12/typesetter-cms-51-logout-csrf_30.html
CVE: CVE-2019-20153
Published: 2020-01-05
Description: An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration files containing administrative credentials).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/; https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE: CVE-2019-20154
Published: 2020-01-05
Description: An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/; https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE: CVE-2019-20155
Published: 2020-01-05
Description: An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/; https://www.n00py.io/2020/01/zero-day-exploit-in-determine-selectica-contract-lifecycle-management-sclm-v5-4/
CVE: CVE-2020-5305
Published: 2020-01-05
Description: Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://codologic.com/forum/index.php?u=/category/news-and-announcements; https://vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in_2.html; http://codologic.com/forum/index.php?u=/category/news-and-announcements
CVE: CVE-2020-5306
Published: 2020-01-05
Description: Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://codologic.com/forum/index.php?u=/category/news-and-announcements; https://vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in.html; https://www.exploit-db.com/exploits/47886
CVE: CVE-2019-19266
Published: 2020-01-06
Description: IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 2 of 2) in notes for objects.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2020/Jan/1; https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-016/-icewarp-cross-site-scripting-in-notes; http://seclists.org/fulldisclosure/2020/Jan/1
CVE: CVE-2019-19265
Published: 2020-01-06
Description: IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows XSS (issue 1 of 2) in notes for contacts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2020/Jan/0; https://www.redteam-pentesting.de/en/advisories/rt-sa-2019-015/-icewarp-cross-site-scripting-in-notes-for-contacts; http://seclists.org/fulldisclosure/2020/Jan/0
CVE: CVE-2020-5191
Published: 2020-01-06
Description: PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://phpgurukul.com/hospital-management-system-in-php/; https://www.exploit-db.com/exploits/47841; https://phpgurukul.com/hospital-management-system-in-php/
CVE: CVE-2020-5192
Published: 2020-01-06
Description: PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not validating user input, and allow for the application's database and information to be fully compromised.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://phpgurukul.com/hospital-management-system-in-php/; https://www.exploit-db.com/exploits/47840; https://phpgurukul.com/hospital-management-system-in-php/
CVE: CVE-2019-20352
Published: 2020-01-06
Description: In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392636; https://bugzilla.nasm.us/show_bug.cgi?id=3392636
CVE: CVE-2019-20354
Published: 2020-01-06
Description: The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user) to download arbitrary files from the Raspberry Pi via api/settings/log?file=../ path traversal. In other words, this issue is in the player API for log download.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/155864/piSignage-2.6.4-Directory-Traversal.html; https://github.com/colloqi/piSignage/blob/master/RELEASE%20NOTES.md; https://github.com/colloqi/piSignage/issues/97
CVE: CVE-2019-5987
Published: 2020-01-06
Description: Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute arbitrary OS commands via the Management Page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN37230341/index.html; https://www.anglers-net.com/anlog/update/index.html; https://jvn.jp/en/jp/JVN37230341/index.html
CVE: CVE-2019-5988
Published: 2020-01-06
Description: Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN37230341/index.html; https://www.anglers-net.com/anlog/update/index.html; https://jvn.jp/en/jp/JVN37230341/index.html
CVE: CVE-2019-5989
Published: 2020-01-06
Description: DOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Analysis Object Page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN37230341/index.html; https://www.anglers-net.com/anlog/update/index.html; https://jvn.jp/en/jp/JVN37230341/index.html
CVE: CVE-2019-5990
Published: 2020-01-06
Description: Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password via HTTP referer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://jvn.jp/en/jp/JVN37230341/index.html; https://www.anglers-net.com/anlog/update/index.html; https://jvn.jp/en/jp/JVN37230341/index.html
CVE: CVE-2019-15975
Published: 2020-01-06
Description: Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass; http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html
CVE: CVE-2019-15976
Published: 2020-01-06
Description: Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass; http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html
CVE: CVE-2019-15977
Published: 2020-01-06
Description: Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass; http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html
CVE: CVE-2019-15978
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system (OS). For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-comm-inject; http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html
CVE: CVE-2019-15979
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operating system (OS). For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-comm-inject; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-comm-inject
CVE: CVE-2019-15980
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav
CVE: CVE-2019-15981
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav