PT-2015-7153 · Cisco · Cisco Content Security Management Appliance

Publicado 2015-09-14 · Atualizado 2016-12-29 · CVE-2015-6288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management Appliance (SMA) version 7.8.0-000

Description The issue is related to improper credential validation, which can be exploited by remote attackers to cause a denial of service. This is achieved through crafted HTTP requests, leading to rapid log-file rollover and application fault.

Recommendations For Cisco Content Security Management Appliance (SMA) version 7.8.0-000, consider restricting access to the appliance until a fix is available to prevent exploitation. As a temporary workaround, monitor log files closely for signs of rapid rollover and application faults, and be prepared to intervene manually if such issues arise. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-6288

Produtos afetados

Cisco Content Security Management Appliance

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6288 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=40847 · Aviso do Fabricante
• http://securitytracker.com/id/1033505 · Nota