Sélection de la langue

Government of Canada / Gouvernement du Canada

Avis aux lectrices et aux lecteurs

Cette publication ne répond pas actuellement aux normes Web du gouvernement du Canada. Les informations restent valables.

Mises à jour de sécurité pour les produits Cisco

Numéro : AV17-034
Date : Le 16 mars 2017

Objet

Le présent avis a pour objet d'attirer l'attention sur de multiple avis de sécurité publiés par Cisco.

Évaluation

Cisco a publié de multiples mises à jour de sécurité afin d'adresser des vulnérabilités (critique à moyen) dans les produits suivants.

  • Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability Affecting Cisco Products
  • Cisco Web Security Appliance URL Filtering Bypass Vulnerability
  • Cisco WebEx Meetings Server XML External Entity Vulnerability
  • Cisco Meshed Wireless LAN Controller Impersonation Vulnerability
  • Cisco WebEx Meetings Server Authentication Bypass Vulnerability
  • Cisco UCS Director Cross-Site Scripting Vulnerability
  • Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability
  • Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
  • Cisco Unified Communications Manager Web Interface Cross-Site Scripting Vulnerability
  • Cisco TelePresence Server API Privilege Vulnerability
  • Cisco Workload Automation and Tidal Enterprise Scheduler Client Manager Server Arbitrary File Read Vulnerability
  • Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities
  • Cisco Nexus 9000 Series Switches Remote Login Denial of Service Vulnerability
  • Cisco Nexus 9000 Series Switches Telnet Login Denial of Service Vulnerability 
  • Cisco Prime Optical for Service Providers RADIUS Secret Disclosure Vulnerability
  • Cisco Prime Infrastructure API Credentials Management Vulnerability 
  • Cisco Nexus 7000 Series Switches Access-Control Filtering Mechanisms Bypass Vulnerability
  • Cisco StarOS SSH Privilege Escalation Vulnerability
  • Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability
  • Cisco Mobility Express 1800 Access Point Series Authentication Bypass Vulnerability

Références CVE:
Critique: CVE-2017-3831, CVE-2017-5638
Élevé: CVE-2017-3846, CVE-2017-3854
Moyen: CVE-2017-3811, CVE-2017-3815, CVE-2017-3819, CVE-2017-3866, CVE-2017-3867, CVE-2017-3868, CVE-2017-3869, CVE-2017-3870, CVE-2017-3871, CVE-2017-3872, CVE-2017-3874, CVE-2017-3875, CVE-2017-3877, CVE-2017-3878, CVE-2017-3879, CVE-2017-3880

Mesure suggérée

Le CCRIC recommande que les administrateurs de système mettent à l'essai et déploient les mises à jour diffusées par le fournisseur aux applications concernées.

Références

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2  (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wms (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wlc-mesh (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucs (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2 (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm1 (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tes (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-psc (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1 (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpo (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cns (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asr (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa (en anglais)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ap1800(en anglais)

Date de modification :