PT-2011-3937 · Cisco · Cisco Show/Share

Published 2011-10-20 · Updated 2017-08-29 · CVE-2011-2584

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 5(2), 5.2(1), and 5.2(2) before 5.2(2.1)

Description The issue allows remote attackers to access administration pages, including Encoders and Pull Configurations, Push Configurations, Video Encoding Formats, and Transcoding, and cause a denial of service or obtain potentially sensitive information via unspecified vectors.

Recommendations For versions 5(2), 5.2(1), and 5.2(2) before 5.2(2.1), update to version 5.2(2.1) or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-2584

Affected Products

Cisco Show/Share

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-2584 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-sns · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70757 · Note
• http://securityfocus.com/bid/50282 · Note