Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could exploit this vulnerability by crafting a malicious HTTP request to contact an affected device. A successful exploit could allow the attacker to update event policies on the affected device.

N/A

关键功能的认证机制缺失

Cisco Application Services Engine 访问控制错误漏洞

Cisco Application Services Engine是美国思科（Cisco）公司的一套用于部署Cisco数据中心应用的通用平台。 Cisco Application Services Engine 1.1.2.20之前版本中的API存在访问控制错误漏洞，该漏洞源于不充分的身份验证。远程攻击者可通过发送恶意的HTTP请求利用该漏洞更新事件策略。

N/A

N/A