WEB Cisco UCS Director saveWindowsNetworkConfig Directory Traversal -2 (CVE-2020-3249)

Rule ID

1137566

Severity

High

Description

A directory traversal vulnerability has been reported in Cisco UCS Directory. The vulnerability is due to insufficient validation of user input in the saveWindowsNetworkConfig method.

Impact

Information disclosure

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

CVE-2020-3249

ZDI-20-544

T1082

T0888

Keywords

N/A

Date Created

2020/09/02

Last Updated

2025/12/11

This website uses cookies to ensure you get the best experience on our website.