CVE-2006-3290

Published: Jun 28, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.

Affected (1)

Products: Cisco: Wireless Control System

1 product

Wireless Control System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Wireless Control System	Up to 3.2\(51\)

References (14)

http://secunia.com/advisories/20870

Source: cve@mitre.org

http://securitytracker.com/id?1016398

Source: cve@mitre.org

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Source: cve@mitre.org

Patch

http://www.osvdb.org/26879

Source: cve@mitre.org

http://www.securityfocus.com/bid/18701

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2583

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27442

Source: cve@mitre.org

http://secunia.com/advisories/20870

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016398

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/26879

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18701

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2583

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27442

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.