Directory Traversal Vulnerability in CiscoWorks Common Services 3.3 and Earlier (CVE-2021-12345)

CVE-2011-0966 · MEDIUM Severity

AV:N/AC:L/AU:S/C:C/I:N/A:N

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.

Learn more about our Cis Benchmark Audit For Cisco.