PT-2015-4800
CVE-2015-0673
·
تاريخ النشر
2015-03-26
·
تاريخ التحديث
2015-09-04
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Mobility Services Engine (MSE) version 8.0(110.0)
Description
The issue allows remote authenticated users to discover the passwords of arbitrary users. This can be achieved by either reading log files or using an unspecified GUI feature.
Recommendations
For Cisco Mobility Services Engine (MSE) version 8.0(110.0), consider restricting access to log files and the unspecified GUI feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾