Description
Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145.
References
- 20160630 Cisco Configuration Assistant Request Processing Unauthorized Access Vulnerability vendor-advisory
- 91523 vdb-entry