CVE-2024-20345

EUVD-2024-18060
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. 

 This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to access sensitive data on an affected device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ciscoCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
ciscoappdynamics_controller
𝑥
< 23.4.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ciscoappdynamics
21.2.0
CNA
ciscoappdynamics
21.2.1
CNA
ciscoappdynamics
21.2.2
CNA
ciscoappdynamics
21.2.3
CNA
ciscoappdynamics
21.2.6
CNA
ciscoappdynamics
21.2.7
CNA
ciscoappdynamics
21.2.8
CNA
ciscoappdynamics
21.4.0
CNA
ciscoappdynamics
21.4.10
CNA
ciscoappdynamics
21.4.11
CNA
ciscoappdynamics
21.4.2
CNA
ciscoappdynamics
21.4.3
CNA
ciscoappdynamics
21.4.4
CNA
ciscoappdynamics
21.4.5
CNA
ciscoappdynamics
21.4.6
CNA
ciscoappdynamics
21.4.7
CNA
ciscoappdynamics
21.4.8
CNA
ciscoappdynamics
21.4.9
CNA
ciscoappdynamics
21.11.0
CNA
ciscoappdynamics
21.5.0
CNA
ciscoappdynamics
21.6.0
CNA
ciscoappdynamics
21.12.0
CNA
ciscoappdynamics
21.12.2
CNA
ciscoappdynamics
21.12.1
CNA
ciscoappdynamics
22.1.0
CNA
ciscoappdynamics
22.1.1
CNA
ciscoappdynamics
22.11.0
CNA
ciscoappdynamics
22.3.0
CNA
ciscoappdynamics
22.10.0
CNA
ciscoappdynamics
22.12.0
CNA
ciscoappdynamics
22.12.1
CNA
ciscoappdynamics
21.7.0
CNA
ciscoappdynamics
22.8.0
CNA
ciscoappdynamics
23.2.0
CNA
ciscoappdynamics
23.4.0
CNA
ciscoappdynamics
23.7.1
CNA
ciscoappdynamics
23.7.0
CNA