Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2009-2977 | 1 Cisco | 1 Cs-mars | 2018-10-10 | 3.3 LOW | N/A |
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files. | |||||
CVE-2006-3732 | 1 Cisco | 1 Cs-mars | 2017-07-19 | 5.0 MEDIUM | N/A |
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information. | |||||
CVE-2006-3734 | 1 Cisco | 1 Cs-mars | 2017-07-19 | 7.2 HIGH | N/A |
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root. | |||||
CVE-2006-0181 | 1 Cisco | 1 Cs-mars | 2017-07-19 | 7.2 HIGH | N/A |
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command. |