Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0666
Reference (s):
- CISCO:20150401 Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability
- URL: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
- SECTRACK:1032009
- URL: http://www.securitytracker.com/id/1032009