CVE-2011-0966

medium Cisco
CVSS v3 Base Score
6.8
AV:N/AC:L/Au:S/C:C/I:N/A:N
EPSS Score
34.8%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
None
Availability
None
Published: May 20, 2011 (5472 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.

CWE

CWE-22

Affected Products

cisco ciscoworks common services

References

🔗 archives.neohapsis.com 🔗 tools.cisco.com 🔗 www.exploit-db.com 🔗 www.senseofsecurity.com.au 🔗 exchange.xforce.ibmcloud.com