Session fixation

2014-08-2909:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.1%

JSON

Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3349

www.securityfocus.com/bid/69455

www.securitytracker.com/id/1030783

exchange.xforce.ibmcloud.com/vulnerabilities/95586