CVE-2009-0615

Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."

Score

CVSS 2.0 9.0 Critical

Status

Modified - psirt@cisco.com

Published

2009-02-26

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Application Control Engine Device Manager (Cisco)
• Application Networking Manager (Cisco)

References

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml
• http://www.securityfocus.com/bid/33903
• http://www.securitytracker.com/id?1021770