CVE-1999-1126

N/A

Description

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/1999

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:resource_manager

References

http://ciac.llnl.gov/ciac/bulletins/i-086.shtml(cve@mitre.org)

http://www.cisco.com/warp/public/770/crmtmp-pub.shtml(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/1575(cve@mitre.org)

http://ciac.llnl.gov/ciac/bulletins/i-086.shtml(af854a3a-2127-422b-91ae-364da2661108)

http://www.cisco.com/warp/public/770/crmtmp-pub.shtml(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/1575(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.