PT-2010-3246 · Cisco · Cisco Content Services Switch (Css) 11500

Published 2010-07-06 · Updated 2018-10-10 · CVE-2010-1575

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Content Services Switch (CSS) 11500 version 08.20.1.01

Description The issue concerns the handling of authentication data through ClientCert-* headers. Specifically, the software does not delete client-supplied ClientCert-* headers, which could allow remote attackers to bypass authentication by crafting header data. For example, an attacker might use a ClientCert-Subject-CN header to exploit this issue.

Recommendations For Cisco Content Services Switch (CSS) 11500 version 08.20.1.01, consider restricting access to the authentication mechanism that relies on ClientCert-* headers until a patch is available. As a temporary workaround, avoid using client-supplied ClientCert-* headers in the authentication process to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-1575

Affected Products

Cisco Content Services Switch (Css) 11500

References · 6

• 🔥 http://vsecurity.com/resources/advisory/20100702-1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1575 · Security Note
• http://securitytracker.com/id?1024167 · Note
• http://securityfocus.com/archive/1/512144/100/0/threaded · Note
• http://osvdb.org/66091 · Note
• http://securityfocus.com/bid/41315 · Note