CVE-2009-0615

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-26 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."

Affected products

Cisco Application Control Engine Device Manager: through 1.2; 1.1
Cisco Application Networking Manager: through 1.2; 1.1

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml
http://www.securityfocus.com/bid/33903
http://www.securitytracker.com/id?1021770
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a7bc84.shtml
http://www.securityfocus.com/bid/33903
http://www.securitytracker.com/id?1021770

Get alerted when CVE-2009-0615 or the next vulnerability affects your stack