CVE-2014-3402 in Cisco Intrusion Prevention Systeminfo

Zusammenfassung (Englisch)

The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550.

Reservieren

07.05.2014

Veröffentlichung

10.10.2014

Einträge

VulDB provides additional information and datapoints for this CVE:

IDSchwachstelleCWEAusMasCVE
67736Cisco Intrusion Prevention System MainApp schwache Authentisierung287UnbewiesenOffizieller FixCVE-2014-3402

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Do you know our Splunk app?

Download it now for free!