OSVDB ID: 84508 Title: Cisco Wide Area Application Services (WAAS) One-way Password Hash Remote Brute Force Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Cisco Wide Area Application Services (WAAS) contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered by the program including a one-way hash of a password within output text. This may allow a remote attacker to gain access to potentially sensitive information via a brute force attack on the hash string. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Upgrade Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Upgrade to version 5.0.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |