Unscored severity · published Feb 23, 2010
CVE-2010-0146
Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors
–
CVSS
2.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Agent · Cisco
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0146
osvdb.org
http://osvdb.org/62443
Vendor Advisory
http://secunia.com/advisories/38619
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/38271
www.securitytracker.com
http://www.securitytracker.com/id?1023606
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0416
More from Security Agent
–
CVE-2011-0364
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via…
–
CVE-2010-0148
Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of…
–
CVE-2010-0147
SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated…
–
CVE-2007-5580
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote…
–
CVE-2007-1067
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…