Vulnerabilites related to Cisco Systems, Inc. - CiscoWorks Common Services (CWCS)
jvndb-2009-000032
Vulnerability from jvndb
Published
2009-05-29 16:19
Modified
2009-05-29 16:19
Severity ?
() - -
Summary
Directory traversal vulnerability in multiple Cisco Systems products
Details
Multiple products provided by Cisco Systems contain a directory traversal vulnerablility. Multiple Cisco Systems products are vulnerable to directory traversal due to an issue in CiscoWorks Common Services. Jun Okada of NTT DATA SECURITY CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000032.html",
  "dc:date": "2009-05-29T16:19+09:00",
  "dcterms:issued": "2009-05-29T16:19+09:00",
  "dcterms:modified": "2009-05-29T16:19+09:00",
  "description": "Multiple products provided by Cisco Systems contain a directory traversal vulnerablility.\r\n\r\nMultiple Cisco Systems products are vulnerable to directory traversal due to an issue in CiscoWorks Common Services.\r\n\r\nJun Okada of NTT DATA SECURITY CORPORATION reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000032.html",
  "sec:cpe": {
    "#text": "cpe:/a:cisco:ciscoworks_common_services",
    "@product": "CiscoWorks Common Services (CWCS)",
    "@vendor": "Cisco Systems, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "10.0",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000032",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN62527913/index.html",
      "@id": "JVN#62527913",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1161",
      "@id": "CVE-2009-1161",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1161",
      "@id": "CVE-2009-1161",
      "@source": "NVD"
    },
    {
      "#text": "http://www.ipa.go.jp/security/english/vuln/200905_cisco_en.html",
      "@id": "Security Alert for Vulnerability in Multiple Cisco Systems Products",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "http://www.securityfocus.com/bid/35040",
      "@id": "35040",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1022263",
      "@id": "1022263",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html",
      "@id": "JVNDB-2009-000032",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-22",
      "@title": "Path Traversal(CWE-22)"
    }
  ],
  "title": "Directory traversal vulnerability in multiple Cisco Systems products"
}