Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that it receives and the software does not apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system. Cisco Bug IDs: CSCvf41365.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco Network Analysis Module Software 路径遍历漏洞
Vulnerability Description
Cisco Network Analysis Module Software（NAM）是美国思科（Cisco）公司的一个网络流量分析软件。 Cisco NAM中的Web界面存在目录遍历漏洞，该漏洞源于程序没有对HTTP请求执行正确的输入验证。远程攻击者可通过向受影响的软件发送特制的HTTP请求利用该漏洞删除受影响系统上任意文件。
CVSS Information
N/A
Vulnerability Type
N/A