PT-2015-1382
CVE-2015-0746
·
Publicado
2015-05-21
·
Atualizado
2016-04-06
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Access Control Server (ACS) version 5.5(0.46.2)
Description
The issue is related to the REST API in Cisco Access Control Server, which allows remote attackers to cause a denial of service by sending many requests. This is due to errors in security settings.
Recommendations
For Cisco Access Control Server (ACS) version 5.5(0.46.2), consider restricting access to the REST API to minimize the risk of exploitation until a patch is available.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾