Unauthorized File Access in Cisco IronPort Encryption Appliance

CVE-2010-0143

Summary

The administrative interface of the embedded HTTPS server on specific versions of Cisco IronPort Encryption Appliance is susceptible to a vulnerability that enables remote attackers to read arbitrary files. This issue affects the 6.2.x versions prior to 6.2.9.1, the 6.5.x versions prior to 6.5.2, and the IronPort PostX MAP prior to 6.2.9.1. The root cause of this vulnerability lies in unspecified vectors allowing for unauthorized file access, posing significant security risks.

References