4.3 Moyenne

CVE-2019-12623 A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure…

Description

A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform file enumeration on an affected system. The vulnerability is due to the web server responding with different error codes for existing and non-existing files. An attacker could exploit this vulnerability by sending GET requests for different file names. A successful exploit could allow the attacker to enumerate files residing on the system.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Enterprise NFV Infrastructure Software 3.12	premières → < 3.12.1	3.12.1

Références

20190821 Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability tools.cisco.com

Chronologie

Publiée 21 août 2019
Dernière modification 21 novembre 2024

Les 41 CVE de Cisco Enterprise NFV Infrastructure Software →

CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 Élevée CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Moyenne CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Moyenne CVE-2026-20090 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 4.8 Moyenne

Suivre cette CVE