Unrated severityNVD Advisory· Published Feb 3, 2004· Updated Apr 16, 2026

CVE-2004-0044

Description

Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.

Affected products

Cisco Systems, Inc./Personal Assistant2 versions
cpe:2.3:a:cisco:personal_assistant:1.4\(1\):*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:personal_assistant:1.4\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:personal_assistant:1.4\(2\):*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtmlnvdPatchVendor Advisory
www.osvdb.org/3430nvd
www.securityfocus.com/bid/9384nvd
exchange.xforce.ibmcloud.com/vulnerabilities/14172nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000