Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read Vulnerability
Vulnerability Description
A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to the improper input validation of tar packages uploaded through the Web Portal to the Image Repository. An attacker could exploit this vulnerability by uploading a crafted tar package and viewing the log entries that are generated. A successful exploit could allow the attacker to read arbitrary files on the underlying OS.
CVSS Information
N/A
Vulnerability Type
通过日志文件的信息暴露
Vulnerability Title
Cisco Enterprise NFV Infrastructure Software 输入验证错误漏洞
Vulnerability Description
Cisco Enterprise NFV Infrastructure Software（NFVIS）是美国思科（Cisco）公司的一套NVF基础架构软件平台。该平台可以通过中央协调器和控制器实现虚拟化服务的全生命周期管理。 Cisco Enterprise NFVIS 3.10.1之前版本中存在输入验证错误漏洞，该漏洞源于程序没有对通过Web门户上传到Image Repository中的tar包进行正确的输入验证。远程攻击者可通过上传特制的tar包并查看日志条目利用该漏洞读取底层操作系统上的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A