deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8815
Published: 2017-11-15
Description: The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html; https://www.debian.org/security/2017/dsa-4036
CVE: CVE-2017-16833
Published: 2017-11-15
Description: Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de; https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de
CVE: CVE-2017-12633
Published: 2017-11-15
Description: The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://camel.apache.org/security-advisories.data/CVE-2017-12633.txt.asc; http://www.securityfocus.com/bid/101874; https://access.redhat.com/errata/RHSA-2018:0319
CVE: CVE-2017-12634
Published: 2017-11-15
Description: The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://camel.apache.org/security-advisories.data/CVE-2017-12634.txt.asc; http://www.securityfocus.com/bid/101876; https://access.redhat.com/errata/RHSA-2018:0319
CVE: CVE-2014-4000
Published: 2017-11-15
Description: Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashes()).
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://forums.cacti.net/viewtopic.php?f=4&t=56794; https://security-tracker.debian.org/tracker/CVE-2014-4000; https://security.gentoo.org/glsa/201711-10
CVE: CVE-2017-14961
Published: 2017-11-15
Description: In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html; https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html; https://www.exploit-db.com/exploits/43139/
CVE: CVE-2017-15269
Published: 2017-11-15
Description: The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-610
References: http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html; http://www.securityfocus.com/archive/1/541518/100/0/threaded; https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
CVE: CVE-2017-15270
Published: 2017-11-15
Description: The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certain extent. Special characters such as '"' and ',' and '\r' are not escaped and can be used to add new entries to the log.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html; http://www.securityfocus.com/archive/1/541518/100/0/threaded; https://www.exploit-db.com/exploits/43144/
CVE: CVE-2017-15271
Published: 2017-11-15
Description: A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very effective DoS attack against this service. By sending a crafted SSH identification / version string to the server, a NULL pointer dereference could be caused, apparently because of a race condition in the window message handling, performing the cleanup for invalid connections. This incorrect cleanup code has a use-after-free.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416
References: http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html; http://www.securityfocus.com/archive/1/541518/100/0/threaded; https://www.exploit-db.com/exploits/43144/
CVE: CVE-2017-15272
Published: 2017-11-15
Description: The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application sets the encrypt flag with the password "ITsILLEGAL"; however, this password is not required to extract the data. Cleartext is used for a user password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-522
References: http://packetstormsecurity.com/files/144972/PSFTPd-Windows-FTP-Server-10.0.4-Build-729-Use-After-Free-Log-Injection.html; http://www.securityfocus.com/archive/1/541518/100/0/threaded; https://www.x41-dsec.de/lab/advisories/x41-2017-006-psftpd/
CVE: CVE-2017-15288
Published: 2017-11-15
Description: The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://scala-lang.org/news/security-update-nov17.html; https://github.com/scala/scala/pull/6108; https://github.com/scala/scala/pull/6120
CVE: CVE-2017-15806
Published: 2017-11-15
Description: The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/101866; https://github.com/zetacomponents/Mail/issues/58; https://github.com/zetacomponents/Mail/releases/tag/1.8.2
CVE: CVE-2017-15923
Published: 2017-11-15
Description: Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service (crash) via vectors related to parsing of IRC color formatting codes.
CVSS Score: 7.5 (HIGH)
References: https://cgit.kde.org/konversation.git/commit/?h=1.7&id=6a7f59ee1b9dbc6e5cf9e5f3b306504d02b73ef0; https://konversation.kde.org/; https://lists.debian.org/debian-lts-announce/2017/11/msg00020.html
CVE: CVE-2014-0219
Published: 2017-11-15
Description: Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://karaf.apache.org/security/cve-2014-0219.txt; http://www.securityfocus.com/bid/101872; https://bugzilla.redhat.com/show_bug.cgi?id=1095974
CVE: CVE-2014-2845
Published: 2017-11-15
Description: Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authority.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://secunia.com/advisories/58426; http://www.securityfocus.com/archive/1/532039/100/0/threaded; https://cyberduck.io/changelog/
CVE: CVE-2014-3150
Published: 2017-11-15
Description: Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.
CVSS Score: 8.8 (HIGH)
CWE: CWE-254
References: https://archive.fo/TZQpD; https://archive.fo/TZQpD
CVE: CVE-2017-15102
Published: 2017-11-15
Description: The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2fae9e5a7babada041e2e161699ade2447a01989; http://seclists.org/oss-sec/2017/q4/238; http://www.securityfocus.com/bid/101790
CVE: CVE-2017-15115
Published: 2017-11-15
Description: The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df80cd9b28b9ebaa284a41df611dbf3a2d05ca74; http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://seclists.org/oss-sec/2017/q4/282
CVE: CVE-2017-5532
Published: 2017-11-15
Description: A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 and below.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101873; https://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-2017-5532; http://www.securityfocus.com/bid/101873
CVE: CVE-2017-5533
Published: 2017-11-15
Description: A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0.
CVSS Score: 9.3 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/101878
CVE: CVE-2017-16834
Published: 2017-11-16
Description: PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/lingej/pnp4nagios/issues/140; https://security.gentoo.org/glsa/201806-09; https://github.com/lingej/pnp4nagios/issues/140
CVE: CVE-2017-16836
Published: 2017-11-16
Description: Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/38657/; https://packetstormsecurity.com/files/134288/Arris-TG1682G-Modem-Cross-Site-Scripting.html
CVE: CVE-2017-16837
Published: 2017-11-16
Description: Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a[PII_REDACTED]0e72c44ed80e/; https://www.usenix.org/conference/usenixsecurity18/presentation/han; https://sourceforge.net/p/tboot/code/ci/521c58e51eb5be105a[PII_REDACTED]0e72c44ed80e/
CVE: CVE-2017-8807
Published: 2017-11-16
Description: vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-119
References: http://varnish-cache.org/security/VSV00002.html; http://www.securityfocus.com/bid/101886; https://bugs.debian.org/881808
CVE: CVE-2017-16841
Published: 2017-11-16
Description: LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43149/; https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscp; https://www.exploit-db.com/exploits/43149/
CVE: CVE-2017-16842
Published: 2017-11-16
Description: Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145080/WordPress-Yoast-SEO-Cross-Site-Scripting.html; https://plugins.trac.wordpress.org/changeset/1766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php; https://wordpress.org/plugins/wordpress-seo/#developers
CVE: CVE-2017-13135
Published: 2017-11-16
Description: A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101929; https://github.com/ebel34/bpg-web-encoder/issues/1; http://www.securityfocus.com/bid/101929
CVE: CVE-2017-13136
Published: 2017-11-16
Description: The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/ebel34/bpg-web-encoder/issues/1; https://github.com/ebel34/bpg-web-encoder/issues/1
CVE: CVE-2017-14034
Published: 2017-11-16
Description: The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/ebel34/bpg-web-encoder/issues/1; https://github.com/ebel34/bpg-web-encoder/issues/1
CVE: CVE-2017-12290
Published: 2017-11-16
Description: Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101863; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res; http://www.securityfocus.com/bid/101863
CVE: CVE-2017-12291
Published: 2017-11-16
Description: Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101863; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res; http://www.securityfocus.com/bid/101863
CVE: CVE-2017-12292
Published: 2017-11-16
Description: Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected service. An attacker could exploit these vulnerabilities by persuading a user to click a malicious link or by sending an HTTP request that could cause the affected service to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web interface of the affected system or allow the attacker to access sensitive browser-based information on the affected system. These types of exploits could also be used in phishing attacks that send users to malicious websites without their knowledge. Cisco Bug IDs: CSCve77195, CSCve90978, CSCvf42310, CSCvf42703, CSCvf42723, CSCvf46169, CSCvf49999.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101863; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-res; http://www.securityfocus.com/bid/101863
CVE: CVE-2017-12299
Published: 2017-11-16
Description: A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process of creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this vulnerability by sending traffic to the local IP address of the targeted device. A successful exploit could allow the attacker to connect to the local IP address of the device even when there are filters configured to deny the traffic. Cisco Bug IDs: CSCvd97962.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101915; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower1; http://www.securityfocus.com/bid/101915
CVE: CVE-2017-12300
Published: 2017-11-16
Description: A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 (SMB2) protocol. The vulnerability is due to the incorrect detection of an SMB2 file when the detection is based on the length of the file. An attacker could exploit this vulnerability by sending a crafted SMB2 transfer request through the targeted device. A successful exploit could allow the attacker to bypass filters that are configured to block SMB2 traffic. Cisco Bug IDs: CSCve58398.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/101862; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower2; http://www.securityfocus.com/bid/101862
CVE: CVE-2017-12302
Published: 2017-11-16
Description: A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The vulnerability is due to a lack of input validation on user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected system. An exploit could allow the attacker to determine the presence of certain values in the database. Cisco Bug IDs: CSCvf36682.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/101853; http://www.securitytracker.com/id/1039826; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-ucm
CVE: CVE-2017-12303
Published: 2017-11-16
Description: A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured AMP file filtering rule. The file types affected are zipped or archived file types. The vulnerability is due to incorrect and different file hash values when AMP scans the file. An attacker could exploit this vulnerability by sending a crafted email file attachment through the targeted device. An exploit could allow the attacker to bypass a configured AMP file filter. Cisco Bug IDs: CSCvf52943.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-358, CWE-358
References: http://www.securityfocus.com/bid/101932; http://www.securitytracker.com/id/1039828; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-wsa