CVE-2017-3846

A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal Enterprise Scheduler Client Manager Server. This vulnerability affects the following products: Cisco Tidal Enterprise Scheduler Client Manager Server releases 6.2.1.435 and later, Cisco Workload Automation Client Manager Server releases 6.3.0.116 and later. Cisco Bug IDs: CSCvc90789.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/96910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038044
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tesVendor Advisory
• http://www.securityfocus.com/bid/96910Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038044
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tesVendor Advisory

Published

Mar 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Acc…
• CVE-2017-3842A vulnerability in the web-based management interface of the…
• CVE-2017-3843A vulnerability in the file download functions for Cisco Pri…
• CVE-2017-3844A vulnerability in exporting functions of the user interface…
• CVE-2017-3845A vulnerability in the web-based management interface of Cis…
• CVE-2017-3847A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-3848A vulnerability in the HTTP web-based management interface o…
• CVE-2017-3849A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3850A vulnerability in the Autonomic Networking Infrastructure (…
• CVE-2017-3851A Directory Traversal vulnerability in the web framework cod…
• CVE-2017-3852A vulnerability in the Cisco application-hosting framework (…