Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2015-6298
HistoryNov 06, 2015 - 11:59 a.m.

Design/Logic Flaw

2015-11-0611:59:00
PRIOn knowledge base
www.prio-n.com
2

6.8 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.1%

JSON

The admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root privileges via crafted certificate-generation arguments, aka Bug ID CSCus83445.

CPENameOperatorVersion
web_security_applianceeq8.5.0-497

Related

cve 1
cisco 1
openvas 1
nessus 1
cve
cve
CVE-2015-6298
2015-11-06 11:59:00
cisco
cisco
Cisco Web Security Appliance Certificate Generation Command Injection Vulnerability
2015-11-04 16:00:00
openvas
openvas
Cisco Web Security Appliance AsyncOS TCP Flood Denial of Service Vulnerability
2015-11-06 00:00:00
nessus
nessus
Cisco Web Security Appliance Multiple Vulnerabilities
2015-11-18 00:00:00

6.8 Medium

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.1%

JSON
Related for PRION:CVE-2015-6298
cve1cisco1openvas1nessus1