PT-2014-4550 · Microsoft+1 · Sharepoint Server+1

Publicado 2014-05-23 · Atualizado 2016-09-07 · CVE-2014-2196

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services (WAAS) versions 5.1.1 through 5.1.1e

Description The issue allows remote SharePoint servers to execute arbitrary code via a malformed response when SharePoint prefetch optimization is enabled.

Recommendations For versions 5.1.1 through 5.1.1e, update to version 5.1.1e or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-2196

Produtos afetados

Cisco Wide Area Application Services

Sharepoint Server

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-waas · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2196 · Nota de Segurança
• http://securitytracker.com/id/1030265 · Nota