NVD

Id
12149  
Name
CVE-2010-0599  
Description
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-27  
Modified Date
2010-06-13  
Seq
2010-0599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66891 12149 CVE-2010-0599 1024027  View
66892 12149 CVE-2010-0599 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator  View
66893 12149 CVE-2010-0599 VU#757804  View
66894 12149 CVE-2010-0599 http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35752 JVNDB-2010-001532 Cisco Mediator Framework における Administrator の認証情報を見破られる脆弱性 Cisco Network Building Mediator および Richards-Zeta Mediator 上で稼働している Cisco Mediator Framework には、オペレーターワークステーションからの XML RPC セッションを暗号化しないため、Administrator の認証情報を見破られる脆弱性が存在します。 CVE-2010-0599 43179 CVE-2010-0599 12149 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001532.html 2010-05-26 2010-06-16 View