CVE-2004-0044 in Personal Assistant
Summary
Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Disclosure
02/03/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 21540 | Cisco Personal Assistant Password Authentication improper authentication | 287 | Not defined | Workaround | CVE-2004-0044 |