Cisco Security Advisory 20040108 – The Cisco Personal Assistant may permit unauthorized access to user configurations via the web interface. Once basic access is granted, normally disallowed user preferences and configurations can be manipulated.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32488/cisco-sa-20040108-pa.txt
Source: https://packetstormsecurity.com/files/32488/Cisco-Security-Advisory-20040108-pa.html