PT-2007-3378 · Cisco · Cisco Wireless Control System

Publicado 2007-04-16 · Atualizado 2017-07-29 · CVE-2007-2035

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Wireless Control System (WCS) versions prior to 4.0.66.0

Description The issue allows remote attackers to obtain network organization data via a direct request for files in certain directories due to insufficient access control. This is because sensitive information is stored under the web root.

Recommendations For versions prior to 4.0.66.0, update to version 4.0.66.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories under the web root to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2035

Produtos afetados

Cisco Wireless Control System

Referências · 8

• http://securitytracker.com/id?1017907 · Nota
• http://securityfocus.com/bid/23460 · Nota
• http://osvdb.org/34131 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33606 · Nota
• http://vupen.com/english/advisories/2007/1367 · Nota
• http://secunia.com/advisories/24865 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2035 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml · Aviso do Fabricante