CVE-2020-3538

CVSS V2 None CVSS V3 None

Description

A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to insufficient path restriction enforcement. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to overwrite or list arbitrary files on the affected device.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Overview

CVE ID
CVE-2020-3538

Assigner
cisco

Vulnerability Status
PUBLISHED

Published Version
2024-11-18T15:53:59.243Z

Last Modified Date
2024-11-18T16:25:34.969Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-pa-trav-bMdfSTTq
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-tls-dos-xW53TBhb
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-authbypass-YVJzqgk2

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2020-3538
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3538

History

Created	Old Value	New Value	Data Type	Notes
2024-11-19 12:02:34				Added to TrackCVE