CVE-1999-1126

LOW 2.1CVE-1999-1126 · Published 31/12/1999 · updated 16/06/2026

In short

CVE-1999-1126 is a LOW (CVSS 2.1) vulnerability affecting resource manager (cisco).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
resource manager cisco	`≤ 1.1`	No fix yet

Description

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".

References

ciac.llnl.gov/ciac/bulletins/i-086.shtml · Patch
cisco.com/warp/public/770/crmtmp-pub.shtml · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/1575

More vulnerabilities in resource manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free