Description
A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected system. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the affected system.
Problem types
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Product status
20.1.12
19.2.1
18.4.4
18.4.5
20.1.1.1
20.1.1
19.3.0
19.2.2
19.2.099
18.3.6
18.3.7
19.2.0
18.3.8
19.0.0
19.1.0
18.4.302
18.4.303
19.2.097
19.2.098
17.2.10
18.3.6.1
19.0.1a
18.2.0
18.4.3
18.4.1
17.2.8
18.3.3.1
18.4.0
18.3.1
17.2.6
17.2.9
18.3.4
17.2.5
18.3.1.1
18.3.5
18.4.0.1
18.3.3
17.2.7
17.2.4
18.3.0
19.2.3
18.4.501_ES
20.3.1
20.1.2
19.2.929
19.2.31
20.3.2
19.2.32
20.3.2_925
20.3.2.1
20.3.2.1_927
18.4.6
20.1.2_937
20.3.2_928
20.3.2_929
20.3.2.1_930
19.2.4
20.3.3
19.2.4.0.1
20.3.2_937
20.3.3.1
20.1.3
20.3.3.1.2
20.3.3.1.1
20.3.3.1.7
20.3.3.1.5
20.3.3.1.10
20.3.3.0.8
20.3.4
20.3.3.0.14
19.2.4.0.8
19.2.4.0.9
20.3.4.0.1
20.3.2.0.5
20.3.3.0.17
20.3.2.0.6
20.3.3.0.16
20.3.4.0.5
20.3.4.0.6
20.3.4.0.11
20.3.3.0.18
20.3.4.0.19
20.3.4.0.20
20.3.4.0.24
20.10.1
20.10.1_LI_Images
20.11.1
20.11.1_LI_Images
20.3.3.2
20.10.1.1
20.3.4.0.25
20.11.1.1
20.3.4.0.26
20.1.3.1
20.11.1.2
20.10.1.2
20.12.1
20.12.1_LI_Images
20.12.2
20.12.2_LI_Images
20.13.1_LI_Images
20.13.1
20.12.3_LI_Images
20.12.3
20.14.1
20.14.1_LI_Images
20.12.3.1
20.12.4
20.15.1_LI_Images
20.15.1
20.12.4.0.03
20.12.4_LI_Images
20.12.4.0.4
20.12.401
20.12.4.1_LI_Images
20.12.4.1
References
sec.cloudapps.cisco.com/...ry/cisco-sa-sdwanarbfile-2zKhKZwJ (cisco-sa-sdwanarbfile-2zKhKZwJ)