CVE-2016-6437
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of disk space. The user would see a performance degradation. More Information: CSCva03095. Known Affected Releases: 5.3(5), 6.1(1), 6.2(1). Known Fixed Releases: 5.3(5g)1, 6.2(2.32).
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - psirt@cisco.com
- Published
- 2016-10-27
- Last modified
- 2024-08-06
- Weaknesses
- CWE-399
Affected products
References
- http://www.securityfocus.com/bid/93524
- http://www.securitytracker.com/id/1037002
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-waas