NVD

Id
12150  
Name
CVE-2010-0600  
Description
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-27  
Modified Date
2010-06-13  
Seq
2010-0600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66895 12150 CVE-2010-0600 1024027  View
66896 12150 CVE-2010-0600 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator  View
66897 12150 CVE-2010-0600 VU#757804  View
66898 12150 CVE-2010-0600 40384  View
66899 12150 CVE-2010-0600 http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35753 JVNDB-2010-001533 Cisco Mediator Framework におけるパスワードおよびアカウントの詳細を読まれる脆弱性 Cisco Network Building Mediator および Richards-Zeta Mediator 上で稼働している Cisco Mediator Framework には、設定ファイルへのネットワークアクセスに関する処理に不備があるため、パスワードおよび特定されていない他のアカウントの詳細を読まれる脆弱性が存在します。 CVE-2010-0600 43180 CVE-2010-0600 12150 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001533.html 2010-05-26 2010-06-16 View