PT-2015-6465 · Cisco · Cisco Email Security Virtual Appliance+2

Publicado 2015-06-26 · Atualizado 2016-12-28 · CVE-2015-4217

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Web Security Virtual Appliance versions prior to 2015-06-25 Cisco Email Security Virtual Appliance versions prior to 2015-06-25 Cisco Security Management Virtual Appliance versions prior to 2015-06-25

Description The issue concerns the remote-support feature on certain Cisco virtual appliances. It uses the same default SSH host keys across different customers' installations. This makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation.

Recommendations For Cisco Web Security Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used. For Cisco Email Security Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used. For Cisco Security Management Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-310

Identificadores relacionados

CVE-2015-4217

Produtos afetados

Cisco Email Security Virtual Appliance

Cisco Security Management Virtual Appliance

Cisco Web Security Virtual Appliance

Referências · 6

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39461 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-4217 · Nota de Segurança
• http://securitytracker.com/id/1032726 · Nota
• http://securityfocus.com/bid/75418 · Nota
• http://securitytracker.com/id/1032725 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport · Aviso do Fabricante