Cisco CiscoWorks Common Services Information Disclosure Vulnerability

Bugtraq ID:	50376
Class:	Design Error
CVE:	CVE-2011-2042
Remote:	Yes
Local:	No
Published:	Oct 26 2011 12:00AM
Updated:	Oct 26 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco CiscoWorks Common Services 3.1.1 Cisco CiscoWorks Common Services 3.0.6 Cisco CiscoWorks Common Services 3.0.5 Cisco CiscoWorks Common Services 3.0.4 Cisco CiscoWorks Common Services 3.0.3 Cisco CiscoWorks Common Services 4.0 Cisco CiscoWorks Common Services 3.6 Base Cisco CiscoWorks Common Services 3.3.0 Cisco CiscoWorks Common Services 3.3 Base Cisco CiscoWorks Common Services 3.3 Cisco CiscoWorks Common Services 3.2 Cisco CiscoWorks Common Services 3.1.1 Base Cisco CiscoWorks Common Services 3.1 Cisco CiscoWorks Common Services 3.0.6 Base Cisco CiscoWorks Common Services 3.0.6 Base Cisco CiscoWorks Common Services 3.0.5 Base Cisco CiscoWorks Common Services 3.0.4 Base Cisco CiscoWorks Common Services 3.0.3 Base Cisco CiscoWorks Common Services 3.0 Base Cisco CiscoWorks Common Services 3.0
Not Vulnerable:	Cisco CiscoWorks Common Services 4.1

Cisco CiscoWorks Common Services Information Disclosure Vulnerability

Cisco CiscoWorks Common Services is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain potentially sensitive information. Information obtained may aid in further attacks.

This issue is tracked by Cisco BugId CSCsk35018.

Cisco CiscoWorks Common Services Information Disclosure Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco CiscoWorks Common Services Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco CiscoWorks Common Services Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Release Notes for CiscoWorks Common Services 3.3 (Cisco)