CVE-2021-1132 | Cisco Network Services Orchestrator 5.3.1/5.4/5.4.0.1/5.4.0.2 API Subsystem/Web-Management Interface path traversal (cisco-sa-nso-path-trvsl-dZRQE8Lc)

A vulnerability, which was classified as problematic, was found in Cisco Network Services Orchestrator 5.3.1/5.4/5.4.0.1/5.4.0.2. Affected is an unknown function of the component API Subsystem/Web-Management Interface. The manipulation leads to path traversal: ‘…/…//’.

This vulnerability is traded as CVE-2021-1132. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.