Description
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system.
Remediation
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
References
Related Vulnerabilities
WordPress Plugin Really Easy Slider TimThumb Arbitrary File Upload (0.1)
MyBB Improper Input Validation Vulnerability (CVE-2016-9420)
WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)
Joomla! Core Directory Traversal (2.5.0 - 3.9.22)
WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0)