| Package | Affected versions | Patched versions |
|---|---|---|
| web security appliance | = 8.5_base |
Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free