Information disclosure in Cisco Wireless Control System Software

CVE-2011-4014

The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807.

Vulnerability class: Information Disclosure

EPSS: 0.009 (58.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Wireless_control_system_software — versions 7.0.164.0, 7.0.164.3, 7.0.172.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CONFIRM)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)