Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2015-04-11T01:00:00
Updated: 2024-08-06T04:17:32.471Z
Reserved: 2015-01-07T00:00:00
Link: CVE-2015-0692
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-04-11T01:59:02.633
Modified: 2024-11-21T02:23:32.880
Link: CVE-2015-0692
Redhat
No data.