CVEvulnerability

CVE-2009-0055

6.8 MEDIUM Published 2009-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to modify appliance preferences as arbitrary users via unspecified vectors.

Affected configurations

• cisco ironport encryption appliance 6.2.4 • cisco ironport encryption appliance 6.2.4.1 • cisco ironport encryption appliance 6.2.5 • cisco ironport encryption appliance 6.2.6 • cisco ironport encryption appliance 6.2.7 • cisco ironport encryption appliance 6.2.7.1 • cisco ironport encryption appliance 6.2.7.2 • cisco ironport encryption appliance 6.2.7.3 • cisco ironport encryption appliance 6.2.7.4 • cisco ironport encryption appliance 6.2.7.5 • cisco ironport encryption appliance 6.2.7.6 • cisco ironport encryption appliance 6.3 • cisco ironport encryption appliance 6.3.0.1 • cisco ironport encryption appliance 6.3.0.2 • cisco ironport encryption appliance 6.3.0.3 • cisco ironport encryption appliance 6.5 • cisco ironport encryption appliance 6.5.0.1 • cisco ironport postx 6.2.1 • cisco ironport postx 6.2.2 • cisco ironport postx 6.2.2.1 • cisco ironport postx 6.2.2.2

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References