Directory Traversal Vulnerability in Cisco SD-WAN vManage Software

CVE-2020-26065

What is CVE-2020-26065?

A vulnerability exists in the web-based management interface of Cisco SD-WAN vManage Software, allowing an authenticated remote attacker to conduct path traversal attacks. This issue arises from inadequate validation of HTTP requests and could be exploited by sending a specifically crafted HTTP request containing directory traversal sequences. If successfully exploited, an attacker could gain unauthorized read access to sensitive files stored on the affected system.

References