10
CVE-2009-4912
- EPSS 2.52%
- Veröffentlicht 29.06.2010 18:30:01
- Zuletzt bearbeitet 16.06.2026 23:14:35
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.52% | 0.828 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html