Thursday, March 8, 2018

Cisco: Update now to fix critical hardcoded password bug, remote code execution flaw

"The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object," explains Cisco. All versions before Cisco Secure ACS 5.8 patch 9 are affected by the flaw. Admins can use the ACS ...

from Google Alert - vulnerability http://ift.tt/2Ic5Dqb
via IFTTT

No comments:

Post a Comment