CVE-2020-26073
HIGHDescription
A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to application programmatic interfaces (APIs). An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and gain access to sensitive information including credentials or user tokens.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Is your site exposed to CVE-2020-26073?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
| cisco | catalyst_sd-wan_manager |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2020-26073? +
How severe is CVE-2020-26073? +
What products are affected by CVE-2020-26073? +
How do I check if I'm vulnerable to CVE-2020-26073? +
Related Vulnerabilities
Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for …
A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not …
Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046.
DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability
`oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. …
The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path …