CVE-2007-2035 Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data....
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless control system | <= 4.0.95 | No fix listed |
References
- 24865 third-party-advisory
- 1017907 vdb-entry
- 20070412 Multiple Vulnerabilities in the Cisco Wireless Control System vendor-advisory
- 34131 vdb-entry
- 23460 vdb-entry
- ADV-2007-1367 vdb-entry
- cisco-wcs-password-information-disclosure(33606) vdb-entry