Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the handleGetAuditLog function. An attacker can access sensitive audit log information, including cross-tenant actor names, host and operator IDs, action timestamps, and masked IP entries, by using any operato...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the handleGetAuditLog function. An attacker can access sensitive audit log information, including cross-tenant actor names, host and operator IDs, action timestamps, and masked IP entries, by using any operato...

PT-2011-2782 · Cisco · Ciscoworks Common Services

Name of the Vulnerable Software and Affected Versions: Cisco CiscoWorks Common Services versions 3.3 and earlier Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the file parameter of the cwhp/auditLog.do endpoint in t...