Cyclades · Cyclades Alterpath Manager (Apm) Console Server · CVE-2005-0541
**Name of the Vulnerable Software and Affected Versions**
Cyclades AlterPath Manager (APM) Console Server version 1.2.1
**Description**
The issue allows remote attackers to connect to arbitrary consoles by modifying the `consolename` parameter in the consoleConnect.jsp file.
**Recommendations**
For version 1.2.1, restrict access to the consoleConnect.jsp file to minimize the risk of exploitation, and avoid using the `consolename` parameter in the affected endpoint until the issue is resolved.