Description
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951).
References
- ADV-2006-2583 vdb-entry
- 20870 third-party-advisory
- 20060628 Multiple Vulnerabilities in Wireless Control System vendor-advisory
- 26883 vdb-entry
- 1016398 vdb-entry
- cisco-wcs-default-database-account(27438) vdb-entry
- 18701 vdb-entry