A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by viewing source code. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks.
oryginał ENCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NCisco Security Manager
APPCisco≤ 4.21
Powiązane podatności
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to se...
A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthentic...
Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could all...
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Com...
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through...