cisco secure firewall threat defense, cisco firepower threat defense, cisco adaptive security appliance software
CVSS 6.5 · Medium EPSS 1,2%
Kerentanan Incorrect Authorization pada cisco secure firewall threat defense, cisco firepower threat defense +1 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked. The vulnerability is due to insufficient validation of URLs when portal access rules are configured. An attacker could exploit this vulnerability by accessing certain URLs on the affected device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | secure firewall threat defense | Versi 6.4.0 hingga sebelum 6.4.0.10 |
| cisco | firepower threat defense | Semua versi sebelum 6.3.0.6 |
| cisco | firepower threat defense | Versi 6.5.0 hingga sebelum 6.5.0.5 |
| cisco | firepower threat defense | Versi 6.6.0 hingga sebelum 6.6.1 |
| cisco | adaptive security appliance software | Semua versi sebelum 9.6.4.45 |
| cisco | adaptive security appliance software | Versi 9.7 hingga sebelum 9.8.4.26 |
| cisco | adaptive security appliance software | Versi 9.9 hingga sebelum 9.9.2.80 |
| cisco | adaptive security appliance software | Versi 9.10 hingga sebelum 9.10.1.44 |
| cisco | adaptive security appliance software | Versi 9.12 hingga sebelum 9.12.4.4 |
| cisco | adaptive security appliance software | Versi 9.13 hingga sebelum 9.13.1.13 |
| cisco | adaptive security appliance software | Versi 9.14 hingga sebelum 9.14.1.19 |