33 matches found
CVE-2013-1196: Improper Input Validation
The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...
PT-2013-2897
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine Software affected versions not specified Cisco Secure Access Control System ACS affected versions not specified Cisco Application Networking Manager ANM affected versions not specified Cisco Prime LAN Management...
Cisco Application Networking Manager Default User Credentials Security Bypass (CVE-2009-0616)
Cisco Application Networking Manager ANM is a network management application that manages Cisco Application Control Engine ACE modules or appliances. The vulnerability is due to a design error in the ANM that does not force credential changes during installation. A remote attacker may exploit thi...
Directory traversal
Directory traversal vulnerability in Cisco Application Networking Manager ANM before 2.0 and Application Control Engine ACE Device Manager before A32.1 allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."...
Design/Logic Flaw
Unspecified vulnerability in the Java agent in Cisco Application Networking Manager ANM before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service service outage by stopping processes, or obtain sensitive information by reading configuration files...
CVE-2009-0615
CVE-2009-0615 concerns directory traversal in Cisco ANM before 2.0 and ACE Device Manager before A3(2.1). Exploitation by an authenticated remote user could read/modify arbitrary files, potentially exposing host OS data due to invalid directory permissions. Related CVEs cover additional ANM flaws...
CVE-2009-0616
Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...
CVE-2009-0617: Undefined Security Weakness
Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...
CVE-2009-0616: Undefined Security Weakness
Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...
CVE-2009-0615: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Cisco Application Networking Manager ANM before 2.0 and Application Control Engine ACE Device Manager before A32.1 allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."...
CVE-2009-0618: Undefined Security Weakness
Unspecified vulnerability in the Java agent in Cisco Application Networking Manager ANM before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service service outage by stopping processes, or obtain sensitive information by reading configuration files...
Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
