CVE-1999-1126: Cisco Resource Manager

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".

Affected products

• Cisco Resource Manager: up to and including 1.1

Published 1999-12-31. Last modified 2026-06-16.