CVE-2023-20166

MEDIUM Year: 2023
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-24
View all →

Vulnerability Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Related Vulnerabilities

CVE-2022-1743

MEDIUM
CVSS:6.8(Medium)

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerabil...

CWE-242022

CVE-2020-8567

MEDIUM
CVSS:6.5(Medium)

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass o...

CWE-242020

CVE-2021-21706

MEDIUM
CVSS:6.5(Medium)

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when ...

CWE-242021

CVE-2022-20656

MEDIUM
CVSS:6.5(Medium)

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. To ex...

CWE-242022

CVE-2023-3240

MEDIUM
CVSS:6.5(Medium)

A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersNews_deal.php. The manipulation of the arg...

CWE-242023

CVE-2023-7040

MEDIUM
CVSS:6.5(Medium)

A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown functionality of the file /file-manager/rename.php. The mani...

CWE-242023