PT-2015-7205 · Cisco · Cisco Content Delivery System Manager

Publicado 2015-11-14 · Atualizado 2016-12-07 · CVE-2015-6364

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Content Delivery System Manager Software version 3.2

Description The issue allows remote attackers to obtain sensitive information via crafted URLs in REST API requests.

Recommendations For Cisco Content Delivery System Manager Software version 3.2, consider restricting access to the REST API until a patch is available. As a temporary workaround, avoid using crafted URLs in REST API requests to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-6364

Produtos afetados

Cisco Content Delivery System Manager

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-vds · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6364 · Nota de Segurança
• http://securitytracker.com/id/1034159 · Nota