CVE-2019-1794

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.

Score

CVSS 3.1 5.1 Medium

Status

Modified - psirt@cisco.com

Published

2019-04-18

Last modified

2024-11-21

Weaknesses

CWE-427

Affected products

• Cisco Directory Connector (Cisco)
• Meeting Server (Cisco)

References

• http://www.securityfocus.com/bid/108032
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-cdc-hijack