| ID |
CVE-2016-1335
|
| Sažetak |
The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previously used for an administrator's connection, aka Bug ID CSCux22492. |
| Reference |
|
| CVSS |
| Base: | 7.1 |
| Impact: | 10.0 |
| Exploitability: | 3.9 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
HIGH |
SINGLE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| CVSS vektor |
AV:N/AC:H/Au:S/C:C/I:C/A:C |
| Zadnje važnije ažuriranje |
04-08-2016 - 18:21 |
| Objavljeno |
19-02-2016 - 19:59 |
