PT-2015-7172
CVE-2015-6309
·
تاريخ النشر
2015-10-02
·
تاريخ التحديث
2018-10-30
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Cisco Email Security Appliance (ESA) versions 8.5.6-106 through 9.6.0-042
Description
The issue allows remote authenticated users to cause a denial of service, resulting in file-descriptor consumption and device reload, via crafted HTTP requests.
Recommendations
For versions 8.5.6-106 through 9.6.0-042, consider restricting access to HTTP requests until a patch is available.
As a temporary workaround, limit the number of concurrent HTTP requests to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾