resource manager essentials vulnerabilities and exploits

(subscribe to this query)

CiscoWorks Common Management Foundation (CMF) 2.1 and previous versions allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a mod...

Cisco Resource Manager 1.1 Cisco Resource Manager Essentials 2.1 Cisco Resource Manager Essentials 2.2 Cisco Resource Manager 1.0 Cisco Resource Manager Essentials 2.0 Cisco Ciscoworks Cd1 1st Cisco Ciscoworks Cd1 3rd Cisco Ciscoworks Common Management Foundation 2.0 Cisco Ciscoworks Cd1 4th Cisco Ciscoworks Cd1 5th Cisco Ciscoworks Common Management Foundation 2.1 Cisco Ciscoworks Cd1 2nd

CiscoWorks Common Management Foundation (CMF) 2.1 and previous versions allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.

Cisco Resource Manager 1.1 Cisco Resource Manager Essentials 2.1 Cisco Resource Manager 1.0 Cisco Resource Manager Essentials 2.0 Cisco Resource Manager Essentials 2.2 Cisco Ciscoworks Cd1 3rd Cisco Ciscoworks Cd1 5th Cisco Ciscoworks Common Management Foundation 2.0 Cisco Ciscoworks Common Management Foundation 2.1 Cisco Ciscoworks Cd1 1st Cisco Ciscoworks Cd1 2nd Cisco Ciscoworks Cd1 4th

It was found that xorg-x11-server prior to 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is...

X.org Xorg-server Debian Debian Linux 7.0

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook