CVE-2011-0966: Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWork...

Security readout for executives and security teams

This flaw could let a remote attacker read files from a vulnerable CiscoWorks management server through a directory traversal issue. The bundle names CiscoWorks Common Services 3.3 and earlier. Business risk depends on whether this legacy management interface still exists and whether it is reachable beyond trusted administrators. Likely exposure is limited to organizations still running legacy CiscoWorks Common Services 3.3 or earlier, especially where the web management interface is reachable from user, partner, VPN, or internet networks. The structured affected-product list is incomplete, so asset confirmation is necessary. Prioritize if CiscoWorks is still present, because management servers often hold sensitive configuration and credentials. If the product is retired or isolated, urgency drops, but the age of the software and public exploit reference make exposure verification important. Mitigation focus: Identify and retire or upgrade affected CiscoWorks Common Services instances.; Review Cisco security alert 23089 and apply vendor guidance.; Restrict management interfaces to trusted administrator networks only..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.