Cisco Prime Infrastructure Health Monitor tar file directory traversal

Added: 11/25/2019
CVE: CVE-2019-1821
BID: 108339

Background

Cisco Prime Infrastructure is a management system of wireless and wired networks.

Problem

A vulnerability in Cisco Prime Infrastructure Health Monitor allows a remote attacker to execute arbitrary commands by uploading a specially crafted tar file.

Resolution

Upgrade to Cisco Prime Infrastructure 3.4.1, 3.5, 3.6, or higher.

References

<https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-rce&gt;

Platforms

Linux