CVE-2024-20345

MEDIUM 6.5CVE-2024-20345 · Published 06/03/2024 · updated 17/06/2026

In short

CVE-2024-20345 is a MEDIUM (CVSS 6.5) vulnerability affecting appdynamics controller (cisco).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.2% of all vulnerabilities.
Fix: update to 23.4.0 or later.

Package	Affected versions	Patched versions
appdynamics controller cisco	`< 23.4.0`	`23.4.0`

Description

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to access sensitive data on an affected device.

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-traversal-m7N8mZpF · Vendor Advisory

More vulnerabilities in appdynamics controller

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free