Cisco FireSIGHT System Software 跨站脚本漏洞(CVE-2016-1293)
Cisco FireSIGHT System Software 跨站脚本漏洞(CVE-2016-1293)
Cisco FireSIGHT System Software 跨站脚本漏洞(CVE-2016-1293)
发布日期:2016-01-16
更新日期:2016-01-18
受影响系统:
Cisco FireSIGHT Management Center 6.0.1
描述:
CVE(CAN) ID: CVE-2016-1293
Cisco FireSIGHT Management Center可以集中管理Cisco ASA with FirePOWER Services及Cisco FirePOWER设备的网络安全及操作功能。
Cisco FireSIGHT System Software 6.0.1版本的Management Center存在跨站脚本漏洞,远程攻击者通过构造的cookie,利用此漏洞可注入任意Web脚本或HTML。
<*来源:Cisco
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT
*>
建议:
厂商补丁:
Cisco
-----
Cisco已经为此发布了一个安全公告(cisco-sa-20160115-FireSIGHT)以及相应补丁:
cisco-sa-20160115-FireSIGHT:Cisco FireSIGHT Management Center Stored Cross-Site Scripting Vulnerabilities
链接:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT
本文永久更新链接地址:
评论暂时关闭