CVE-2015-0692

Cisco Web Security Appliance WSA devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230...

CVE-2015-0692

Cisco Web Security Appliance (WSA) devices running software 8.5.0-ise-147 are affected by CVE-2015-0692 due to improper restriction of the pickle module during certain tunnel-status checks. The vulnerability allows an authenticated, local attacker to execute arbitrary Python code and gain privile...