CVE-2017-3846

Related Files

Cisco Security Advisory 20170315-tes

Posted Mar 16, 2017

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal Enterprise Scheduler Client Manager Server. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

tags | advisory, remote

systems | cisco

advisories | CVE-2017-3846

SHA-256 | 0742ceb22f1861972c1748f3c5cd467a250c277f3d7a11eebfc96fd3898a494d

Download | Favorite | View