Skip to content
OpenAdvisories
Medium · 5.1 CVE-2019-1794 EUVD-2019-10351GHSA-m57f-9997-gm6m

Cisco Directory Connector Search Order Hijacking Vulnerability

Published Apr 18, 2019 · Updated Nov 21, 2024 · Assigned by cisco

Description

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.

Affected products

VendorProductAffectedFixed
Cisco Cisco Directory Connector 2.2 —

References