Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Wide Area Application Services Software Information Disclosure Vulnerability
Vulnerability Description
A vulnerability in Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper input validation and authorization of specific commands that a user can execute within the CLI. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to read arbitrary files that they originally did not have permissions to access.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
将资源暴露给错误范围
Vulnerability Title
Cisco Wide Area Application Services 安全漏洞
Vulnerability Description
Cisco Wide Area Application Services是美国思科（Cisco）公司的一个应用系统。用于协同工作以优化网络上的TCP流量。 Cisco Wide Area Application Services (WAAS) Software 存在安全漏洞，该漏洞源于用户可以在CLI中执行的特定命令的不正确输入验证和授权。攻击者可利用该漏洞读取他们最初没有访问权限的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A