CVE-2006-4352

2022-10-0316:21:32

mitre

www.cve.org

cisco

content service switches

cookie vulnerability

remote attackers

sensitive information

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

JSON

The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attackers to obtain sensitive information.

References

www.cisco.com/warp/public/117/AP_cookies.html

www.osvdb.org/28121