CVE-2012-5213

CVE-2012-5213 is an information-disclosure vulnerability in HP Intelligent Management Center (iMC) and iMC for ANM prior to version 5.2 E0401 (aka ZDI-CAN-1662). Exploitation would allow remote attackers to obtain sensitive information via unknown vectors. HP’s security bulletin and related NASL ...

CVE-2012-5204

CVE-2012-5204 affects HP Intelligent Management Center (iMC) and related ANM modules. The connected documentation confirms a directory traversal in the IctDownloadServlet that enables an unauthenticated attacker to retrieve arbitrary files with SYSTEM privileges, leading to information disclosure...

CVE-2012-5201

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611...

CVE-2012-5203

CVE-2012-5203 in HP Intelligent Management Center (iMC) and iMC for ANM (pre-5.2 E0401) is an information-disclosure vulnerability exploitable via a ReportImgServlet directory-traversal. The issue arises from lack of authentication and insufficient input validation in ReportImgServlet when proces...

CVE-2012-5204

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1614...

CVE-2013-1125

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...

CVE-2013-1125

Summary: CVE-2013-1125 affects Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, an...

PT-2013-2897

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine Software affected versions not specified Cisco Secure Access Control System ACS affected versions not specified Cisco Application Networking Manager ANM affected versions not specified Cisco Prime LAN Management...

CVE-2013-1125: Improper Input Validation

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...

CVE-2009-0616

Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...

CVE-2009-0617

Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...

CVE-2009-0615

Directory traversal vulnerability in Cisco Application Networking Manager ANM before 2.0 and Application Control Engine ACE Device Manager before A32.1 allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."...

CVE-2009-0618

Unspecified vulnerability in the Java agent in Cisco Application Networking Manager ANM before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service service outage by stopping processes, or obtain sensitive information by reading configuration files...

Default credentials

Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...

Default credentials

Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...

CVE-2009-0617

Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...

CVE-2009-0618

CVE-2009-0618 concerns the Cisco Application Networking Manager (ANM) Java agent privilege escalation. The connected advisories/records indicate that ANM versions prior to 2.0 Update A allow a remote attacker to view configuration files and modify ANM processes, including stopping services, poten...

CVE-2009-0616

Cisco ANM (and ACE Device Manager) prior to listed fixed releases contain a default credentials vulnerability. ANM 2.0 and earlier allow remote access or DoS via unchanged admin/MySQL/default credentials; Java agent privilege escalation also reported. The advisory fixes include ANM 2.0 Update A a...

CVE-2009-0615

CVE-2009-0615 concerns directory traversal in Cisco ANM before 2.0 and ACE Device Manager before A3(2.1). Exploitation by an authenticated remote user could read/modify arbitrary files, potentially exposing host OS data due to invalid directory permissions. Related CVEs cover additional ANM flaws...

CVE-2009-0617

CVE-2009-0617 affects Cisco ANM (Application Networking Manager) prior to version 2.0, where ANM uses a default MySQL root password. This creates a risk of remote command execution or modification of system files on the underlying host OS, as described in Cisco’s advisory and NVD/NVD-derived cont...