CVE-2009-1135
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 26%
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
Produtos afetados
n/a · n/aReferências
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031http://secunia.com/advisories/35784https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649http://www.securitytracker.com/id?1022547http://www.us-cert.gov/cas/techalerts/TA09-195A.htmlhttp://www.vupen.com/english/advisories/2009/1889