Directory Traversal Vulnerability in Cisco SD-WAN vManage Software
CVE-2020-26065
What is CVE-2020-26065?
A vulnerability exists in the web-based management interface of Cisco SD-WAN vManage Software, allowing an authenticated remote attacker to conduct path traversal attacks. This issue arises from inadequate validation of HTTP requests and could be exploited by sending a specifically crafted HTTP request containing directory traversal sequences. If successfully exploited, an attacker could gain unauthorized read access to sensitive files stored on the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cisco SD-WAN vManage 17.2.6
Cisco SD-WAN vManage 17.2.7
Cisco SD-WAN vManage 17.2.8
References
CVSS V3.1
Timeline
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved