CVE-2007-2035 Information

Description

Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control which allows remote attackers to obtain network organization data via a direct request for files in certain directories aka Bug ID CSCsg04301.

Reference

http://secunia.com/advisories/24865 http://securitytracker.com/id?1017907 http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml http://www.osvdb.org/34131 http://www.securityfocus.com/bid/23460 http://www.vupen.com/english/advisories/2007/1367 https://exchange.xforce.ibmcloud.com/vulnerabilities/33606