PT-2015-7146 · Cisco · Cisco Telepresence Ix5000

Publicado 2015-09-05 · Atualizado 2016-12-29 · CVE-2015-6276

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence IX5000 version 8.0.3

Description The issue allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices by directly requesting the certificate directory, due to insufficient access control of a private key associated with an X.509 certificate stored under the web root.

Recommendations For Cisco TelePresence IX5000 version 8.0.3, restrict access to the certificate directory to minimize the risk of exploitation. Consider implementing proper access controls for the private key to prevent unauthorized access.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-6276

Produtos afetados

Cisco Telepresence Ix5000

Referências · 3

• http://securitytracker.com/id/1033477 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6276 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=40727 · Aviso do Fabricante