PT-2015-7216
CVE-2015-6386
·
تاريخ النشر
2015-12-01
·
تاريخ التحديث
2017-09-14
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Web Security Appliance (WSA) versions 8.0.7-142 and 8.5.1-021
Description
The issue allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer.
Recommendations
For version 8.0.7-142, update to a version that fixes this issue.
For version 8.5.1-021, update to a version that fixes this issue.
As a temporary workaround, consider restricting FTP sessions to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾