CVE-2019-15266

Cisco Wireless LAN Controller Path Traversal Vulnerability

State: Published
Severity: 4.4 Medium
Published: Oct 16, 2019
Updated: Nov 21, 2024
Reserved: Aug 20, 2019

Description

A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted. This vulnerability is due to improper sanitization of user-supplied input in command-line parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. A successful exploit could allow the attacker to view system files that may contain sensitive information.

Scores

CVSS	Score	Vector	Source
3.0	4.4 Medium	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	cisco

Weaknesses

CWE-22

Affected Products

Product	Versions
Cisco Wireless LAN Controller (WLC)Cisco	before n/aAffected

References

20191016 Cisco Wireless LAN Controller Path Traversal Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.