CVE-2020-3597

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker could exploit this vulnerability by persuading an administrator to restore a crafted configuration backup file. A successful exploit could allow the attacker to overwrite arbitrary files that are accessible through the affected software on an affected device.

• CWE-23
• CWE-22

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-path-traversal-wVDyXZPyVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-path-traversal-wVDyXZPyVendor Advisory

Published

Oct 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35952login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before…6.5
• CVE-2020-3596A vulnerability in the Session Initiation Protocol (SIP) of …7.5
• CVE-2020-35962The sellTokenForLRC function in the vault protocol in the sm…7.5
• CVE-2020-35963flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 h…7.8
• CVE-2020-35964track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an…6.5
• CVE-2020-35965decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-…7.5
• CVE-2020-35970An issue was discovered in YzmCMS 5.8. There is a SSRF vulne…7.5
• CVE-2020-35971A storage XSS vulnerability is found in YzmCMS v5.8, which c…5.4
• CVE-2020-35972An issue was discovered in YzmCMS V5.8. There is a CSRF vuln…4.3
• CVE-2020-35973An issue was discovered in zzcms2020. There is a XSS vulnera…5.4
• CVE-2020-35979An issue was discovered in GPAC version 0.8.0 and 1.0.1. The…7.8
• CVE-2020-3598A vulnerability in the web-based management interface of Cis…6.5