PT-2004-3435 · Secure Computing · Sidewinder G2

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2544

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Secure Computing Corporation Sidewinder G2 version 6.1.0.01

Description The issue allows attackers to obtain sensitive information by exporting private keys when exporting firewall certificates from the Admin Console.

Recommendations For Secure Computing Corporation Sidewinder G2 version 6.1.0.01, avoid exporting firewall certificates from the Admin Console until a fix is available. As a temporary workaround, consider restricting access to the certificate export feature to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2544

Produtos afetados

Sidewinder G2

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-2544 · Nota de Segurança
• http://osvdb.org/6235 · Correção
• http://securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24364 · Nota