CVE

Id
44156  
CVE No.
CVE-2010-1572  
Status
Candidate  
Description
Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform (AXP) 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls.  
Phase
Assigned (20100427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
481582 44156 CVE-2010-1572 CISCO:20100609 Cisco Application Extension Platform Privilege Escalation Vulnerability  View
481583 44156 CVE-2010-1572 URL:http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3290b.shtml  View
481584 44156 CVE-2010-1572 BID:40682  View
481585 44156 CVE-2010-1572 URL:http://www.securityfocus.com/bid/40682  View
481586 44156 CVE-2010-1572 XF:cisco-aep-shell-privilege-escalation(59271)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35949 JVNDB-2010-001729 Cisco Content Services Switch における HTTP Request Smuggling 攻撃の脆弱性 Cisco Content Services Switch (CSS) および Application Control Engine (ACE) には、HTTP ヘッダ間の CRLF シーケンスの代用となる LF、CR および LFCR の使用を適切に処理しないため、ヘッダの挿入を回避される、または HTTP Request Smuggling 攻撃の脆弱性が存在します。 CVE-2010-1576 44156 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001729.html  View