{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-28T00:00:00", "descriptions": [{"lang": "en", "value": "HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-2583", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2583"}, {"name": "20870", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20870"}, {"name": "cisco-wcs-http-information-disclosure(27442)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27442"}, {"name": "20060628 Multiple Vulnerabilities in Wireless Control System", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml"}, {"name": "1016398", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016398"}, {"name": "26879", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26879"}, {"name": "18701", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18701"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3290", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-2583", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2583"}, {"name": "20870", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20870"}, {"name": "cisco-wcs-http-information-disclosure(27442)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27442"}, {"name": "20060628 Multiple Vulnerabilities in Wireless Control System", "refsource": "CISCO", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml"}, {"name": "1016398", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016398"}, {"name": "26879", "refsource": "OSVDB", "url": "http://www.osvdb.org/26879"}, {"name": "18701", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18701"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3290", "datePublished": "2006-06-28T23:00:00", "dateReserved": "2006-06-28T00:00:00", "dateUpdated": "2017-07-19T15:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B0A192A-AC2C-494D-9AFD-EB4C5DA536B4", "versionEndIncluding": "3.2\\(51\\)", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request."}, {"lang": "es", "value": "El servidor HTTP de Cisco Wireless Control System (WCS) para Linux y Windows en sus versiones anteriores a la v3.2(51) almacena informaci\u00f3n confidencial bajo el directorio raiz web con insuficiente control de acceso, lo que permite a atacantes remotos obtener nombres de usuario y rutas de directorios a trav\u00e9s de peticiones directas de URL."}], "id": "CVE-2006-3290", "lastModified": "2017-07-20T01:32:12.443", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-28T23:05:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/20870"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016398"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/26879"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18701"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2583"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27442"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}