CVEvulnerability

CVE-1999-1126

2.1 LOW Published 1999-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".

Affected configurations

• cisco resource manager (<= 1.1)

References