Description (CNA)
A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Directory Connector | affected 2.2 |
CWE
CWE-427
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-cdc-hijack
- http://www.securityfocus.com/bid/108032
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.