|CVSS SCORE||7.8, (AV:N/AC:L/Au:N/C:C/I:N/A:N)|
|TIPPINGPOINT™ IPS CUSTOMER PROTECTION||TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 13560. For further product information on the TippingPoint IPS: http://www.tippingpoint.com|
The specific flaw exists within the handling of access to the management portal. The issue lies in the failure to restrict access to configuration files. An attacker can leverage this vulnerability to leak credentials which can then be chained to execute code with root privileges.
|CREDIT||Ricky "HeadlessZeke" Lawshae