NVD

Id
83166  
Name
CVE-2017-3846  
Description
A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal Enterprise Scheduler Client Manager Server. This vulnerability affects the following products: Cisco Tidal Enterprise Scheduler Client Manager Server releases 6.2.1.435 and later, Cisco Workload Automation Client Manager Server releases 6.3.0.116 and later. Cisco Bug IDs: CSCvc90789.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-03-15  
Modified Date
2017-07-11  
Seq
2017-3846  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408665 83166 CVE-2017-6011 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054  View
408666 83166 CVE-2017-6011 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054  View
411058 83166 CVE-2017-0464 96735  View
411059 83166 CVE-2017-0464 https://source.android.com/security/bulletin/2017-03-01.html  View
411060 83166 CVE-2017-0464 https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=051597a4fe19fd1292fb7ea2e627d12d1fd2934f  View
411061 83166 CVE-2017-0464 96735  View
411062 83166 CVE-2017-0464 https://source.android.com/security/bulletin/2017-03-01.html  View
411063 83166 CVE-2017-0464 https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=051597a4fe19fd1292fb7ea2e627d12d1fd2934f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66173 JVNDB-2017-002512 Cisco Workload Automation および Tidal Enterprise Scheduler における不適切な入力確認に関する脆弱性 Cisco Workload Automation および Tidal Enterprise Scheduler には、不適切な入力確認に関する脆弱性が存在します。 CVE-2017-3846 CVE-2017-3846 83166 5 8.6 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002512.html 2017-03-15 2017-04-18 View