Cisco Show and Share Anonymous Access Security Bypass Vulnerability
BID:50282
Info
Cisco Show and Share Anonymous Access Security Bypass Vulnerability
| Bugtraq ID: | 50282 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-2584 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 19 2011 12:00AM |
| Updated: | Oct 19 2011 12:00AM |
| Credit: | Andy Yang and Mehdi Kiani of stratsec |
| Vulnerable: |
Cisco Show and Share 5.2(2) Cisco Show and Share 5.2(1) Cisco Show and Share 5(2) |
| Not Vulnerable: |
Cisco Show and Share 5.2(2.1) |
Discussion
Cisco Show and Share Anonymous Access Security Bypass Vulnerability
Cisco Show and Share is prone to a security-bypass vulnerability.
Remote attackers can exploit this issue to gain anonymous access to certain administration pages. Successful exploits may compromise the affected application and possibly the underlying computer.
This issue is being tracked by Cisco Bug ID CSCto73758.
Cisco Show and Share is prone to a security-bypass vulnerability.
Remote attackers can exploit this issue to gain anonymous access to certain administration pages. Successful exploits may compromise the affected application and possibly the underlying computer.
This issue is being tracked by Cisco Bug ID CSCto73758.
Exploit / POC
Cisco Show and Share Anonymous Access Security Bypass Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Cisco Show and Share Anonymous Access Security Bypass Vulnerability
Solution:
A vendor advisory is available to address this issue. Please see the references for more information.
Solution:
A vendor advisory is available to address this issue. Please see the references for more information.
References
Cisco Show and Share Anonymous Access Security Bypass Vulnerability
References:
References:
- Cisco Homepage (Cisco)
- Cisco Show and Share Security Vulnerabilities (Cisco)