Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0452
foundry networks
serveriron switches
traffic redirection
uri decoding
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Foundry Networks ServerIron switches do not decode URIs when applying “url-map” rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible.
Affected configurations
Node
foundrynetserverironMatch5.1.10t12
ORfoundrynetserverironMatch6.0
ORfoundrynetserverironMatch7.1.09
ORfoundrynetserverironMatch400
ORfoundrynetserverironMatch800
ORfoundrynetserverironMatchxl
ORfoundrynetserverironMatchxl_g
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Related for CVE-2002-0452