Vulnerabilities > CVE-2016-6437 - Resource Management Errors vulnerability in Cisco Wide Area Application Services
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://www.securityfocus.com/bid/93524
- http://www.securityfocus.com/bid/93524
- http://www.securitytracker.com/id/1037002
- http://www.securitytracker.com/id/1037002
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas