5.1
Medium
CVE-2019-1794 A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local…
Description
A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Directory Connector | 2.2 | No fix stated |
References
- 20190417 Cisco Directory Connector Search Order Hijacking Vulnerability tools.cisco.com
- 108032 www.securityfocus.com
Timeline
- Published
- Last modified