Medium severity6.5NVD Advisory· Published Mar 6, 2024· Updated Jun 17, 2026

CVE-2024-20345

Description

A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to access sensitive data on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Appdynamics Controller2 versions
cpe:2.3:a:cisco:appdynamics_controller:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:appdynamics_controller:*:*:*:*:*:*:*:*range: <23.4.0
- (no CPE)
Cisco Systems, Inc./AppDynamicscpe-rescue
Range: 21.2.0

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-traversal-m7N8mZpFnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000