Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco IronPort Encryption Appliance和Cisco IronPort PostX 身份认证和访问控制漏洞
Vulnerability Description
IronPort系列产品是广泛使用的邮件加密网关，能够无缝地完成机密电子邮件的加密、解密和数字签名工作。 IronPort加密设备的管理界面存在跨站请求伪造漏洞，如果用户登录到IronPort加密设备管理界面的话，可能允许攻击者修改用户的IronPort加密设备首选项，包括用户名和个人安全密码短语。利用这个漏洞不允许攻击者更改用户的口令。这个漏洞在IronPort bug中记录5806。
CVSS Information
N/A
Vulnerability Type
N/A