Boletines de Vulnerabilidades

Cisco TelePresence IX5000 Systems Certificate Information Disclosure Vulnerability
Información sobre el sistema

Software afectado	Cisco
Descripción
A vulnerability in the directory on the Web Management Interface of Cisco TelePresence IX5000 Systems could allow an unauthenticated, remote attacker to decrypt captured traffic on the affected device or perform a man-in-the-middle attack.The vulnerability is due to the inclusion of the certificate directory as a public resource. An attacker could exploit this vulnerability by downloading the private and public side of the X.509 certificate that protects the HTTP channel to the Web Management More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150903-CVE-2015-6276?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20TelePresence%20IX5000%20Systems%20Certificate%20Information%
Identificadores estándar
Propiedad	Valor
CVE