CVE-2004-0044

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-02-03 · updated 2026-06-16

Description

Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.

Affected products

Cisco Personal Assistant: 1.4(1), 1.4(2)

References

http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml
http://www.osvdb.org/3430
http://www.securityfocus.com/bid/9384
https://exchange.xforce.ibmcloud.com/vulnerabilities/14172
http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml
http://www.osvdb.org/3430
http://www.securityfocus.com/bid/9384
https://exchange.xforce.ibmcloud.com/vulnerabilities/14172

Get alerted when CVE-2004-0044 or the next vulnerability affects your stack