Directory Traversal Vulnerability in Cisco Network Analysis Module Software

CVE-2017-12285

Summary

A vulnerability in the web interface of Cisco Network Analysis Module Software permits unauthenticated remote attackers to delete arbitrary files on an affected system. This issue arises from improper input validation of HTTP requests, combined with the absence of role-based access controls for HTTP URLs. By crafting a malicious HTTP request, an attacker can exploit this vulnerability to gain unauthorized access and potentially compromise system integrity by removing critical files.

References