cpe:/a:cisco:application_control_engine_device_manager:1.1 cpe:/a:cisco:application_control_engine_device_manager:1.2 cpe:/a:cisco:application_networking_manager:1.1 cpe:/a:cisco:application_networking_manager:1.2 CVE-2009-0615 2009-02-26T11:17:20.030-05:00 2009-03-03T02:04:48.920-05:00 9.0 NETWORK LOW SINGLE_INSTANCE COMPLETE COMPLETE COMPLETE http://nvd.nist.gov 2009-02-27T09:06:00.000-05:00 ALLOWS_ADMIN_ACCESS SECTRACK 1021770 CISCO 20090225 Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities BID 33903 IAVM IAVM:2009-T-0016 Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."