Vulnerabilities > CVE-2010-4303 - Credentials Management vulnerability in Cisco products

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
cisco
CWE-255
NVD
Published: 2010-11-22
Updated: 2024-11-21

Summary

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.

Vulnerable Configurations

Part Description Count
Application
Cisco
2
Hardware
Cisco
2
OS
Linux
1

Common Weakness Enumeration (CWE)

References