PT-2017-17287 · Cisco · Cisco Web Security Appliance

Publicado 2017-07-25 · Atualizado 2017-08-08 · CVE-2017-6746

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance (WSA) versions 10.0 through 10.1.0-204 Cisco Web Security Appliance (WSA) version 10.1.0-204

Description A vulnerability in the web interface of the Cisco Web Security Appliance could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials.

Recommendations For Cisco Web Security Appliance (WSA) versions 10.0 through 10.1.0-204, update to version 10.5.1-270 or 10.1.1-235 to resolve the issue. For Cisco Web Security Appliance (WSA) version 10.1.0-204, update to version 10.5.1-270 or 10.1.1-235 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-6746

Produtos afetados

Cisco Web Security Appliance

Referências · 5

• http://securityfocus.com/bid/99877 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6746 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6746 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1 · Aviso do Fabricante
• http://securitytracker.com/id/1038948 · Nota