HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2013-5486

CVSS 10.0v2.0pub. 2013-09-23upd. 2026-04-29

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Cisco Prime Data Center Network Manager

    APP
    Cisco
    4.1\(2\)4.1\(3\)4.1\(4\)4.1\(5\)4.2\(1\)4.2\(3\)5.0\(2\)5.0\(3\)5.1\(1\)5.1\(2\)5.1\(3u\)5.2\(2\)5.2\(2a\)5.2\(2b\)5.2\(2c\)+ 4 więcej
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path TraversalCommand Injection
CWE
References

Related vulnerabilities

CVE-2018-0258CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote ...

CVE-2017-6640CRITICAL9.8ten sam produkt

A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, rem...

CVE-2017-6639CRITICAL9.8ten sam produkt

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manag...

CVE-2015-0666HIGH7.5⚠ KEVten sam produkt

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) be...

CVE-2018-0464HIGH8.1ten sam produkt

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to...