Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco IDS Device Manager任意文件读访问漏洞
Vulnerability Description
IDS Device Manager是一款CISCO IDS系统的WEB接口,由CISCO公司分发和维护。 IDS Device Manager对用户输入缺少正确充分的检查,可导致远程攻击者查看系统上任意文件信息。 由于没有对用户输入的数据进行有效的安全性检查,攻击者可以通过提交包含多个"../"字符串进行目录遍历,以IDS Device Manager的权限在目标系统中查看任意文件内容,导致系统敏感信息泄露。 <**>
CVSS Information
N/A
Vulnerability Type
N/A