Vulnerability-Lookup

CNVD-2018-16702

Vulnerability from cnvd - Published: 2018-08-29

Title

Cisco Data Center Network Manager目录遍历漏洞

Description

Cisco Data Center Network Manager是美国思科（Cisco）公司的一套数据中心管理系统。该系统适用于Cisco Nexus和MDS系列交换机，提供存储可视化、配置和故障排除等功能。 Cisco Data Center Network Manager存在目录遍历漏洞，该漏洞源于管理界面中的用户请求验证不当，攻击者可以通过在管理界面中发送包含目录遍历字符序列的恶意请求利用此漏洞在目标系统上查看或创建任意文件。

Severity

高

Patch Name

Cisco Data Center Network Manager目录遍历漏洞的补丁

Patch Description

Formal description

思科已发布了软件更新，请联系厂商下载更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal

Reference

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal

Impacted products

Name
Cisco Data Center Network Manager <11.0(1)

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0464"
    }
  },
  "description": "Cisco Data Center Network Manager\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\r\n\r\nCisco Data Center Network Manager\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7ba1\u7406\u754c\u9762\u4e2d\u7684\u7528\u6237\u8bf7\u6c42\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5728\u7ba1\u7406\u754c\u9762\u4e2d\u53d1\u9001\u5305\u542b\u76ee\u5f55\u904d\u5386\u5b57\u7b26\u5e8f\u5217\u7684\u6076\u610f\u8bf7\u6c42\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u67e5\u770b\u6216\u521b\u5efa\u4efb\u610f\u6587\u4ef6\u3002",
  "discovererName": "Tenable, Inc",
  "formalWay": "\u601d\u79d1\u5df2\u53d1\u5e03\u4e86\u8f6f\u4ef6\u66f4\u65b0\uff0c\u8bf7\u8054\u7cfb\u5382\u5546\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-16702",
  "openTime": "2018-08-29",
  "patchDescription": "Cisco Data Center Network Manager\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\r\n\r\nCisco Data Center Network Manager\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7ba1\u7406\u754c\u9762\u4e2d\u7684\u7528\u6237\u8bf7\u6c42\u9a8c\u8bc1\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u5728\u7ba1\u7406\u754c\u9762\u4e2d\u53d1\u9001\u5305\u542b\u76ee\u5f55\u904d\u5386\u5b57\u7b26\u5e8f\u5217\u7684\u6076\u610f\u8bf7\u6c42\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u76ee\u6807\u7cfb\u7edf\u4e0a\u67e5\u770b\u6216\u521b\u5efa\u4efb\u610f\u6587\u4ef6\u3002\r\n\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Data Center Network Manager\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Data Center Network Manager \u003c11.0(1)"
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal",
  "serverity": "\u9ad8",
  "submitTime": "2018-08-29",
  "title": "Cisco Data Center Network Manager\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e"
}

CVE-2018-0464 (GCVE-0-2018-0464)

Vulnerability from cvelistv5 – Published: 2018-10-05 16:00 – Updated: 2024-11-26 14:26

Title

Cisco Data Center Network Manager Path Traversal Vulnerability

Summary

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-25 18:50 UTC

CWE

CWE-22

Assigner

cisco mitre root Scorecard

References

4 references

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1041585	vdb-entryx_refsource_SECTRACK
https://www.tenable.com/security/research/tra-2018-20	x_refsource_MISC
http://www.securityfocus.com/bid/105159	vdb-entryx_refsource_BID

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco Data Center Network Manager	Affected: n/a

Date Public

2018-08-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:28:10.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
          },
          {
            "name": "1041585",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041585"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2018-20"
          },
          {
            "name": "105159",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105159"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T18:50:40.803693Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T14:26:18.428Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Data Center Network Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-07T09:57:02.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
        },
        {
          "name": "1041585",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041585"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.tenable.com/security/research/tra-2018-20"
        },
        {
          "name": "105159",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105159"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20180828-dcnm-traversal",
        "defect": [
          [
            "CSCvj86072"
          ]
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Cisco Data Center Network Manager Path Traversal Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2018-08-28T21:00:00-0500",
          "ID": "CVE-2018-0464",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Data Center Network Manager Path Traversal Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Data Center Network Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "8.1",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20180828 Cisco Data Center Network Manager Path Traversal Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180828-dcnm-traversal"
            },
            {
              "name": "1041585",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041585"
            },
            {
              "name": "https://www.tenable.com/security/research/tra-2018-20",
              "refsource": "MISC",
              "url": "https://www.tenable.com/security/research/tra-2018-20"
            },
            {
              "name": "105159",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105159"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20180828-dcnm-traversal",
          "defect": [
            [
              "CSCvj86072"
            ]
          ],
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0464",
    "datePublished": "2018-10-05T16:00:00.000Z",
    "dateReserved": "2017-11-27T00:00:00.000Z",
    "dateUpdated": "2024-11-26T14:26:18.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-16702

CVE-2018-0464 (GCVE-0-2018-0464)

Tags

Sightings

Nomenclature

Related by attack behaviour