{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-12T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20070412 Multiple Vulnerabilities in the Cisco Wireless Control System", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml"}, {"name": "ADV-2007-1367", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1367"}, {"name": "1017907", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017907"}, {"name": "cisco-wcs-account-privilege-escalation(33612)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33612"}, {"name": "23460", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23460"}, {"name": "24865", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24865"}, {"name": "34129", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/34129"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2033", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20070412 Multiple Vulnerabilities in the Cisco Wireless Control System", "refsource": "CISCO", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml"}, {"name": "ADV-2007-1367", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1367"}, {"name": "1017907", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017907"}, {"name": "cisco-wcs-account-privilege-escalation(33612)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33612"}, {"name": "23460", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23460"}, {"name": "24865", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24865"}, {"name": "34129", "refsource": "OSVDB", "url": "http://www.osvdb.org/34129"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2033", "datePublished": "2007-04-16T21:00:00", "dateReserved": "2007-04-16T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "9EC49D1B-76A2-4E5E-B00B-DE80BDA63C06", "versionEndIncluding": "4.0.95", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Cisco Wireless Control System (WCS) anterior a 4.0.81.0 permite a usuarios autenticados remotamente leer cualquier p\u00e1gina de configuraci\u00f3n cambiando la pertenencia a grupos de las cuentas de usuario, tambi\u00e9n conocido como Bug ID CSCse78596."}], "id": "CVE-2007-2033", "lastModified": "2017-07-29T01:31:11.517", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-16T21:19:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/24865"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017907"}, {"source": "cve@mitre.org", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/34129"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23460"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1367"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33612"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}