deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9861
Published: 2017-08-05
Description: An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to replay attacks, packet injection attacks, and man in the middle attacks. An attacker is able to successfully use SIP to communicate with the device from anywhere within the LAN. An attacker may use this to crash the device, stop it from communicating with the SMA servers, exploit known SIP vulnerabilities, or find sensitive information from the SIP communications. Furthermore, because the SIP communication channel is unencrypted, an attacker capable of understanding the protocol can eavesdrop on communications. For example, passwords can be extracted. NOTE: the vendor's position is that authentication with encryption is not required on an isolated subnetwork. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.sma.de/en/statement-on-cyber-security.html; http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf; https://horusscenario.com/CVE-information/
CVE: CVE-2017-9862
Published: 2017-08-05
Description: An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is possible to create a debug report, disclosing information regarding the application and allowing the attacker to create and save a .txt file with contents to his liking. An attacker may use this for information disclosure, or to write a file to normally unavailable locations on the local system. NOTE: the vendor reports that "the information contained in the debug report is of marginal significance." Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.sma.de/en/statement-on-cyber-security.html; http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf; https://horusscenario.com/CVE-information/
CVE: CVE-2017-9863
Published: 2017-08-05
Description: An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits a malicious host, cross-site request forgery can be used to change settings in the inverters (for example, issuing a POST request to change the user password). All Sunny Explorer settings available to the authenticated user are also available to the attacker. (In some cases, this also includes changing settings that the user has no access to.) This may result in complete compromise of the device. NOTE: the vendor reports that exploitation is unlikely because Sunny Explorer is used only rarely. Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.sma.de/en/statement-on-cyber-security.html; http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf; https://horusscenario.com/CVE-information/
CVE: CVE-2017-9864
Published: 2017-08-05
Description: An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authenticated in any way. This changes the system time, possibly affecting lockout policies and random-number generators based on timestamps, and makes timestamps for data analysis unreliable. NOTE: the vendor reports that this is largely irrelevant because it only affects log-entry timestamps, and because the plant time would later be reset via NTP. (It has never been the case that a lockout policy or random-number generator was affected.) Also, only Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 could potentially be affected
CVSS Score: 7.5 (HIGH)
References: http://www.sma.de/en/statement-on-cyber-security.html; http://www.sma.de/fileadmin/content/global/specials/documents/cyber-security/Whitepaper-Cyber-Security-AEN1732_07.pdf; https://horusscenario.com/CVE-information/
CVE: CVE-2017-12563
Published: 2017-08-05
Description: In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/100153; https://github.com/ImageMagick/ImageMagick/issues/599; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-12564
Published: 2017-08-05
Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100161; https://github.com/ImageMagick/ImageMagick/issues/601; http://www.securityfocus.com/bid/100161
CVE: CVE-2017-12565
Published: 2017-08-05
Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100156; https://github.com/ImageMagick/ImageMagick/issues/602; http://www.securityfocus.com/bid/100156
CVE: CVE-2017-12566
Published: 2017-08-05
Description: In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/603; https://github.com/ImageMagick/ImageMagick/issues/603
CVE: CVE-2017-12572
Published: 2017-08-05
Description: Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.splunk.com/view/SP-CAAAPYC; https://www.splunk.com/view/SP-CAAAPYC
CVE: CVE-2017-12568
Published: 2017-08-06
Description: Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets.
CVSS Score: 7.5 (HIGH)
References: https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278; https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278
CVE: CVE-2017-12581
Published: 2017-08-06
Description: GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy (SOP) is a precondition; however, recent Electron versions do not have strict SOP enforcement. Combining an SOP bypass with a privileged URL internally used by Electron, it was possible to execute native Node.js primitives in order to run OS commands on the user's host. Specifically, a chrome-devtools://devtools/bundled/inspector.html window could be used to eval a Node.js child_process.execFile API call.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://blog.doyensec.com/2017/08/03/electron-framework-security.html; https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security.pdf; https://blog.doyensec.com/2017/08/03/electron-framework-security.html
CVE: CVE-2017-12583
Published: 2017-08-06
Description: DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/splitbrain/dokuwiki/issues/2061; https://github.com/splitbrain/dokuwiki/issues/2061
CVE: CVE-2017-12584
Published: 2017-08-06
Description: There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/slims/slims8_akasia/issues/49; https://github.com/slims/slims8_akasia/issues/49
CVE: CVE-2017-12585
Published: 2017-08-06
Description: SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. It can be exploited by remote authenticated librarian users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/slims/slims8_akasia/issues/47; https://github.com/slims/slims8_akasia/issues/47
CVE: CVE-2017-12586
Published: 2017-08-06
Description: SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/slims/slims8_akasia/issues/48; https://github.com/slims/slims8_akasia/issues/48
CVE: CVE-2017-12480
Published: 2017-08-06
Description: Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41; https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41
CVE: CVE-2017-12587
Published: 2017-08-06
Description: ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-834
References: https://github.com/ImageMagick/ImageMagick/issues/535; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-12588
Published: 2017-08-06
Description: The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with unspecified impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://github.com/rsyslog/rsyslog/blob/master/ChangeLog; https://github.com/rsyslog/rsyslog/commit/062d0c671a29f7c6f7dff4a2f1f35df375bbb30b; https://github.com/rsyslog/rsyslog/pull/1565
CVE: CVE-2017-10677
Published: 2017-08-06
Description: Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery.html; https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery.html
CVE: CVE-2017-12596
Published: 2017-08-07
Description: In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/openexr/openexr/issues/238; https://github.com/openexr/openexr/releases/tag/v2.3.0; https://github.com/xiaoqx/pocs/blob/master/openexr.md
CVE: CVE-2017-12597
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12598
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12599
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12600
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.
CVSS Score: 7.5 (HIGH)
References: https://github.com/opencv/opencv/issues/9311; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://security.gentoo.org/glsa/201712-02
CVE: CVE-2017-12601
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12602
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
CVSS Score: 7.5 (HIGH)
References: https://github.com/opencv/opencv/issues/9311; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://security.gentoo.org/glsa/201712-02
CVE: CVE-2017-12603
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12604
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12605
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2017-12606
Published: 2017-08-07
Description: OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/opencv/opencv/issues/9309; https://github.com/xiaoqx/pocs/blob/master/opencv.md; https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html
CVE: CVE-2006-3635
Published: 2017-08-07
Description: The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.26; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4dcc29e1574d88f4465ba865ed82800032f76418; https://bugzilla.suse.com/show_bug.cgi?id=199440
CVE: CVE-2017-6418
Published: 2017-08-07
Description: libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100154; https://bugzilla.clamav.net/show_bug.cgi?id=11797; https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_email_crash.md
CVE: CVE-2017-6419
Published: 2017-08-07
Description: mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3946; https://bugzilla.clamav.net/show_bug.cgi?id=11701; https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md
CVE: CVE-2017-6420
Published: 2017-08-07
Description: The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.clamav.net/show_bug.cgi?id=11798; https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/use-after-free/clamav-use-after-free-pe.md; https://github.com/vrtadmin/clamav-devel/commit/dfc00cd3301a42b571454b51a6102eecf58407bc
CVE: CVE-2011-4650
Published: 2017-08-07
Description: Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: https://icisystem.blogspot.com/2015/09/cisco-notification-alert-prime-dcnm-01.html; https://quickview.cloudapps.cisco.com/quickview/bug/CSCtt15295; https://icisystem.blogspot.com/2015/09/cisco-notification-alert-prime-dcnm-01.html
CVE: CVE-2017-6663
Published: 2017-08-07
Description: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/99973; http://www.securitytracker.com/id/1038999; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
CVE: CVE-2017-6664
Published: 2017-08-07
Description: A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/99986; http://www.securitytracker.com/id/1038997; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
CVE: CVE-2017-6665
Published: 2017-08-07
Description: A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability. More Information: CSCvd51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/99969; http://www.securitytracker.com/id/1038998; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp
CVE: CVE-2017-6745
Published: 2017-08-07
Description: A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the allotted resources within the system. An attacker could exploit this vulnerability by sending large amounts of inbound traffic to a device with the intention of overloading certain resources. A successful exploit could cause the device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc39260.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/100106; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-vds; http://www.securityfocus.com/bid/100106
CVE: CVE-2017-6747
Published: 2017-08-07
Description: A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication. The vulnerability is due to improper handling of authentication requests and policy assignment for externally authenticated users. An attacker could exploit this vulnerability by authenticating with a valid external user account that matches an internal username and incorrectly receiving the authorization policy of the internal account. An exploit could allow the attacker to have Super Admin privileges for the ISE Admin portal. This vulnerability does not affect endpoints authenticating to the ISE. The vulnerability affects Cisco ISE, Cisco ISE Express, and Cisco ISE Virtual Appliance running Release 1.3, 1.4, 2.0.0, 2.0.1, or 2.1.0. Release 2.2.x is not affected. Cisco Bug IDs: CSCvb10995.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securitytracker.com/id/1039054; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-ise; http://www.securitytracker.com/id/1039054
CVE: CVE-2017-6752
Published: 2017-08-07
Description: A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/100113; http://www.securitytracker.com/id/1039057; https://quickview.cloudapps.cisco.com/quickview/bug/CSCvd47888