PT-2015-7153 · Cisco · Cisco Content Security Management Appliance

Published 2015-09-14 · Updated 2016-12-29 · CVE-2015-6288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management Appliance (SMA) version 7.8.0-000

Description The issue is related to improper credential validation, which can be exploited by remote attackers to cause a denial of service. This is achieved through crafted HTTP requests, leading to rapid log-file rollover and application fault.

Recommendations For Cisco Content Security Management Appliance (SMA) version 7.8.0-000, consider restricting access to the appliance until a fix is available to prevent exploitation. As a temporary workaround, monitor log files closely for signs of rapid rollover and application faults, and be prepared to intervene manually if such issues arise. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6288

Affected Products

Cisco Content Security Management Appliance

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6288 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=40847 · Vendor Advisory
• http://securitytracker.com/id/1033505 · Note