Vulnerability-Lookup

CNVD-2020-19239

Vulnerability from cnvd - Published: 2020-03-25

Title

Cisco Data Center Network Manager路径遍历漏洞

Description

Cisco Data Center Network Manager（DCNM）是美国思科（Cisco）公司的一套数据中心管理系统。该系统适用于Cisco Nexus和MDS系列交换机，提供存储可视化、配置和故障排除等功能。 Cisco DCNM 11.3(1)之前版本中的Application Framework功能存在路径遍历漏洞，该漏洞源于程序未能充分验证发送到Application Framework端点的用户输入。远程攻击者可通过发送特制的请求利用该漏洞以管理权限在系统中读取，编写或执行任意文件。

Severity

高

Patch Name

Cisco Data Center Network Manager Application Framework目录遍历漏洞的补丁

Patch Description

Cisco Data Center Network Manager是数据中心的网络管理解决方案。 Cisco Data Center Network Manager Application Framework存在目录遍历漏洞，Cisco DCNM的Application Framework中的漏洞可能允许通过身份验证，攻击者可利用该漏洞在受影响的设备上执行任目录遍历攻击，执行读写等操作。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布相关漏洞补丁链接，请及时更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-15982

Impacted products

Name
Cisco Cisco Data Center Analytics Framework < 11.3(1)

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-15982",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-15982"
    }
  },
  "description": "Cisco Data Center Network Manager\uff08DCNM\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u9002\u7528\u4e8eCisco Nexus\u548cMDS\u7cfb\u5217\u4ea4\u6362\u673a\uff0c\u63d0\u4f9b\u5b58\u50a8\u53ef\u89c6\u5316\u3001\u914d\u7f6e\u548c\u6545\u969c\u6392\u9664\u7b49\u529f\u80fd\u3002\n\nCisco DCNM 11.3(1)\u4e4b\u524d\u7248\u672c\u4e2d\u7684Application Framework\u529f\u80fd\u5b58\u5728\u8def\u5f84\u904d\u5386\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u9a8c\u8bc1\u53d1\u9001\u5230Application Framework\u7aef\u70b9\u7684\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5\u7ba1\u7406\u6743\u9650\u5728\u7cfb\u7edf\u4e2d\u8bfb\u53d6\uff0c\u7f16\u5199\u6216\u6267\u884c\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u76f8\u5173\u6f0f\u6d1e\u8865\u4e01\u94fe\u63a5\uff0c\u8bf7\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-19239",
  "openTime": "2020-03-25",
  "patchDescription": "Cisco Data Center Network Manager\u662f\u6570\u636e\u4e2d\u5fc3\u7684\u7f51\u7edc\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nCisco Data Center Network Manager Application Framework\u5b58\u5728\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff0cCisco DCNM\u7684Application Framework\u4e2d\u7684\u6f0f\u6d1e\u53ef\u80fd\u5141\u8bb8\u901a\u8fc7\u8eab\u4efd\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u4e0a\u6267\u884c\u4efb\u76ee\u5f55\u904d\u5386\u653b\u51fb\uff0c\u6267\u884c\u8bfb\u5199\u7b49\u64cd\u4f5c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Data Center Network Manager Application Framework\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Cisco Data Center Analytics Framework \u003c 11.3(1)"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-15982",
  "serverity": "\u9ad8",
  "submitTime": "2020-01-03",
  "title": "Cisco Data Center Network Manager\u8def\u5f84\u904d\u5386\u6f0f\u6d1e"
}

CVE-2019-15982 (GCVE-0-2019-15982)

Vulnerability from cvelistv5 – Published: 2020-01-06 07:45 – Updated: 2024-11-15 17:51

Title

Cisco Data Center Network Manager Path Traversal Vulnerabilities

Summary

Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.

Severity

7.2 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-15 16:25 UTC

CWE

CWE-22

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco Data Center Network Manager	Affected: unspecified , < n/a (custom)

Date Public

2020-01-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:03:32.629Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-15982",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-15T16:25:23.627768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-15T17:51:37.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Data Center Network Manager",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "n/a",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2020-01-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-06T07:45:35.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20200102-dcnm-path-trav",
        "defect": [
          [
            "CSCvq85957",
            "CSCvq85972",
            "CSCvq85998",
            "CSCvq89422",
            "CSCvq89834",
            "CSCvq89841",
            "CSCvq89878",
            "CSCvq89895",
            "CSCvr05463",
            "CSCvr17970",
            "CSCvr44896",
            "CSCvr46508",
            "CSCvr79240",
            "CSCvs16318",
            "CSCvs16341",
            "CSCvs16350"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Data Center Network Manager Path Traversal Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2020-01-02T16:00:00-0800",
          "ID": "CVE-2019-15982",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Data Center Network Manager Path Traversal Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Data Center Network Manager",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "7.2",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200102 Cisco Data Center Network Manager Path Traversal Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20200102-dcnm-path-trav",
          "defect": [
            [
              "CSCvq85957",
              "CSCvq85972",
              "CSCvq85998",
              "CSCvq89422",
              "CSCvq89834",
              "CSCvq89841",
              "CSCvq89878",
              "CSCvq89895",
              "CSCvr05463",
              "CSCvr17970",
              "CSCvr44896",
              "CSCvr46508",
              "CSCvr79240",
              "CSCvs16318",
              "CSCvs16341",
              "CSCvs16350"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-15982",
    "datePublished": "2020-01-06T07:45:35.686Z",
    "dateReserved": "2019-09-06T00:00:00.000Z",
    "dateUpdated": "2024-11-15T17:51:37.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.