CVE-2019-1794

GHSA-m57f-9997-gm6m

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.

BDU:2019-01897

Уязвимость приложения для синхронизации идентификаторов в облаке Cisco Directory Connector, связанная с ошибками механизма проверки пути поиска, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации