CVE-2020-3484 — Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability

Description (CNA)

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected device. The vulnerability is due to incorrect permissions within Apache configuration. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to view potentially sensitive information on the affected device.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Vision Dynamic Signage Director	affected n/a

CWE

CWE-16

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vdsd-W7mnkwj7

ADP enrichment

CVE

No English description supplied.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vdsd-W7mnkwj7

CISA-ADP

No English description supplied.

No references supplied.