4405 matches found
Cisco Prime Collaboration Assurance Default 'cmuser' Credentials (cisco-sa-20151209-pca)
The remote Cisco Prime Collaboration Assurance device is protected by default credentials. This is due to an undocumented account that is created during installation. A remote attacker can exploit this to log in to the system shell with the default 'cmuser' user account, and access the shell with...
Cisco Prime Collaboration Assurance Default Account Credentials Vulnerability
Cisco Prime Collaboration Assurance PCA is a set of enterprise collaboration network management solutions from Cisco. A security vulnerability exists in Cisco PCA prior to version 11.0. A remote attacker could exploit the vulnerability to gain access by creating an SSH session with a known accoun...
Cisco Hosted Collaboration Mediation Fulfillment Information Disclosure Vulnerability
Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. An information disclosure vulnerability exists ...
Code injection
Cisco Hosted Collaboration Mediation Fulfillment 10.63 does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374...
CVE-2015-6404
The CVE-2015-6404 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3), where lack of RBAC in the SOAP API allows an authenticated admin user to retrieve sensitive credentials and other restricted data. Root cause: missing RBAC in the HCM-F SOAP interface. Impact: infor...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
Hardcoded credentials
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 is affected by CVE-2015-6389 due to a hardcoded cmuser account. An undocumented default account with a known password enables remote SSH login, granting access with limited permissions. Root cause: installation creates a persistent, unchangeable cmu...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability
A vulnerability in the Simple Object Access Protocol SOAP application programming interface API of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an authenticated, remote attacker to obtain sensitive information that should be restricted. The attacker must authentica...
金蝶协作办公系统 /kingdee/tree/tree/announce/get_nodes.jsp 参数 node SQL注射
No description provided by source...
金蝶协作办公系统/kingdee/tree/tree/announce/get_selected.jsp 参数 ids SQL注射
No description provided by source...
金蝶协作办公系统 /kingdee/tree/tree/news/get_selected.jsp 参数 ids SQL注射
No description provided by source...
金蝶协作办公系统 /kingdee/tree/tree/news/get_nodes.jsp 参数 node SQL注射
No description provided by source...
金蝶协作办公系统/kingdee/tree/tree/rules/get_selected.jsp 参数 ids SQL注射
No description provided by source...
Cisco Prime Collaboration Assurance Default Account Credential Vulnerability
A vulnerability in Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to log in to the system shell with the default cmuser user account and access the shell with a limited set of permissions. The vulnerability is due to an undocumented account that h...
Cisco Warning of CSRF, XSS Vulnerabilities
UPDATE Cisco is warning users this week that several of its products — routers, gateways, and data center platforms — suffer from vulnerabilities, including one critical one. Cisco warned about the most pressing issue, a critical vulnerability in its Prime Collaboration Assurance software, shortl...
Microsoft, Law Enforcement Collaborate in Dorkbot Takedown
A coalition of law enforcement agencies worked together recently to disrupt Dorkbot, a botnet that’s managed to infect more than one million machines in 190 countries during the last year. Researchers with Microsoft’s Malware Protection Center announced the news via a post on the MMPC blog. Two...
[SECURITY] Fedora 21 Update: zarafa-7.1.14-1.fc21
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability
Cisco Prime Collaboration Assurance is a set of enterprise collaboration network management solutions from the U.S. company Cisco Cisco. A cross-site request forgery vulnerability exists in Cisco Prime Collaboration Assurance 10.51 and 10.6. It allows remote attackers to hijack the authentication...