Description
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
References
- 20070412 Multiple Vulnerabilities in the Cisco Wireless Control System vendor-advisory
- ADV-2007-1367 vdb-entry
- 1017907 vdb-entry
- 23460 vdb-entry
- 24865 third-party-advisory
- 34131 vdb-entry
- cisco-wcs-password-information-disclosure(33606) vdb-entry