PT-2010-2327 · Cisco+1 · Cisco Digital Media Manager+1

Publicado 2010-03-05 · Atualizado 2017-08-17 · CVE-2010-0570

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Digital Media Manager (DMM) versions 5.0.x through 5.1.x

Description The issue allows remote attackers to execute arbitrary code via a crafted web application due to a default password for the Tomcat administration account.

Recommendations For versions 5.0.x through 5.1.x, change the default password for the Tomcat administration account to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-0570

Produtos afetados

Cisco Digital Media Manager

Apache Tomcat

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/56634 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0570 · Nota de Segurança
• http://vupen.com/english/advisories/2010/0531 · Nota
• http://secunia.com/advisories/38800 · Nota
• http://securityfocus.com/bid/38503 · Nota
• http://securitytracker.com/id?1023671 · Nota