CVE-2015-0666

A flaw in Cisco Prime DCNM allows attackers to read any file on the server by using specially crafted file paths. This is dangerous because sensitive information like configuration files or passwords could be exposed.

Directory traversal vulnerability in the fmserver servlet permits unauthenticated remote attackers to bypass path validation and access arbitrary files on the system via manipulated pathname parameters. Exploitation requires network access to the vulnerable servlet and affects Cisco Prime DCNM versions prior to 7.1(1), potentially exposing sensitive data stored on the server.