CVE-2020-3452—Cisco ASA and FTD Read-Only Path Traversal Vulnerability

漏洞名称

Cisco ASA and FTD Read-Only Path Traversal Vulnerability

描述

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-3452

相关 CWE

• CWE-20