PT-2010-2327 · Cisco+1 · Cisco Digital Media Manager+1

Published 2010-03-05 · Updated 2017-08-17 · CVE-2010-0570

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Digital Media Manager (DMM) versions 5.0.x through 5.1.x

Description The issue allows remote attackers to execute arbitrary code via a crafted web application due to a default password for the Tomcat administration account.

Recommendations For versions 5.0.x through 5.1.x, change the default password for the Tomcat administration account to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-0570

Affected Products

Cisco Digital Media Manager

Apache Tomcat

References · 7

• http://cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0570 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56634 · Note
• http://vupen.com/english/advisories/2010/0531 · Note
• http://secunia.com/advisories/38800 · Note
• http://securityfocus.com/bid/38503 · Note
• http://securitytracker.com/id?1023671 · Note