Cisco Application Networking Manager Default User Credentials Security Bypass (CVE-2009-0616)

Cisco Application Networking Manager ANM is a network management application that manages Cisco Application Control Engine ACE modules or appliances. The vulnerability is due to a design error in the ANM that does not force credential changes during installation. A remote attacker may exploit thi...

CVE-2009-0616

Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...

CVE-2009-0616

Cisco ANM (and ACE Device Manager) prior to listed fixed releases contain a default credentials vulnerability. ANM 2.0 and earlier allow remote access or DoS via unchanged admin/MySQL/default credentials; Java agent privilege escalation also reported. The advisory fixes include ANM 2.0 Update A a...

Cisco应用联网管理器和应用控制引擎多个安全漏洞

BUGTRAQ ID: 33903 CVECAN ID: CVE-2009-0615,CVE-2009-0616,CVE-2009-0617,CVE-2009-0618 Cisco应用联网管理器（ANM）是用于管理Cisco应用控制引擎（ACE）模块或设备的网络管理应用，安装在Red Hat Enterprise Linux操作系统的客户服务器上；ACE设备管理器位于ACE设备的闪存中，提供了用于配置和管理单个ACE设备的基于浏览器的接口。 ANM中存在多个漏洞，ACE设备管理器产品中存在一个漏洞，以下是本文所述每个漏洞的详细信息。 无效目录权限...