RULE(RULE ID:312011)

Rule General Information
Release Date: 2020-01-14
Rule Name: Cisco Prime Data Center Network Manager Information Disclosure Vulnerability (CVE-2015-0666)
Severity:
CVE ID:
Rule Protection Details
Description: Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows, Others
Reference: SecurityTrackerID:1032009
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://tools.cisco.com/bugsearch/bug/CSCus00241