CVE-2015-0666
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Cisco Prime DCNM allows attackers to read any file on the server by using specially crafted file paths. This is dangerous because sensitive information like configuration files or passwords could be exposed.
Directory traversal vulnerability in the fmserver servlet permits unauthenticated remote attackers to bypass path validation and access arbitrary files on the system via manipulated pathname parameters. Exploitation requires network access to the vulnerable servlet and affects Cisco Prime DCNM versions prior to 7.1(1), potentially exposing sensitive data stored on the server.
The full analysis of this CVE is available in Portuguese →