CVE-2024-20345
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vu
Description
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to access sensitive data on an affected device.
Weakness: CWE-26
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco AppDynamics | Other Products | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco AppDynamics
Vendor advisory
cisco-sa-appd-traversal-m7N8mZpF
Cisco AppDynamics Controller Path Traversal Vulnerability
Cisco’s rating: Medium (advisory CVSS 6.5) · Published Mar 6, 2024
Bug ID: CSCwh18934
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from