CVEvulnerability

CVE-2009-0615

9.0 HIGH Published 2009-02-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."

Affected configurations

• cisco application control engine device manager (<= 1.2) • cisco application control engine device manager 1.1 • cisco application networking manager (<= 1.2) • cisco application networking manager 1.1

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References