Description (CNA)
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://ciac.llnl.gov/ciac/bulletins/i-086.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1575
- http://www.cisco.com/warp/public/770/crmtmp-pub.shtml
ADP enrichment
No English description supplied.