CVE-2015-0692

Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status…

published April 11, 2015

CVSS
—
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.2th percentile
Published
2015-04-11T01:00Z
EPSS history
Timeline
  • 11 APR 01:00Z
    Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status…
    cvelistv5