Security Advisory

CVE-2016-6412

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-09-24 01:00:00
Last updated 2024-08-06 01:29:20
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.