Directory Traversal Vulnerability in CiscoWorks Common Services 3.3 and Earlier (CVE-2021-12345)

CVE-2011-0966

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.

Learn more about our Cis Benchmark Audit For Cisco.