CVE-2018-0323

Name of the Vulnerable Software and Affected Versions Cisco Enterprise NFV Infrastructure Software (NFVIS) (affected versions not specified)

Description A vulnerability in the web management interface could allow an authenticated, remote attacker to conduct a path traversal attack. This issue is due to insufficient validation of web request parameters. An attacker with access to the web management interface could exploit this by sending a malicious web request, potentially allowing access to sensitive information on the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.