Information disclosure in Cisco Content Security Management Virtual Appliance
CVE-2015-4216
The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630.
Vulnerability class: Information Disclosure
EPSS: 0.033 (87.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Content_security_management_virtual_appliance — versions 8.4.0.0150, 9.0.0.087
- Cisco Email_security_virtual_appliance — versions 8.0.0, 8.5.6, 8.5.7
- Cisco Web_security_virtual_appliance — versions 7.7.5, 8.0.5, 8.5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)