Path Traversal in Cisco Application Control Engine Device Manager
CVE-2009-0615
Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.020 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Application_control_engine_device_manager — versions 1.1
- Cisco Application_networking_manager — versions 1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)