5
CVE-2010-4690
- EPSS 2.05%
- Veröffentlicht 07.01.2011 23:00:19
- Zuletzt bearbeitet 16.06.2026 23:25:21
- Erkennungen
LoginThe Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version <= 8.3\(1\)
Cisco ≫ Adaptive Security Appliance Software Version 7.0
Cisco ≫ Adaptive Security Appliance Software Version 7.0.1
Cisco ≫ Adaptive Security Appliance Software Version 7.0.1.4
Cisco ≫ Adaptive Security Appliance Software Version 7.0.2
Cisco ≫ Adaptive Security Appliance Software Version 7.0.4
Cisco ≫ Adaptive Security Appliance Software Version 7.0.4.3
Cisco ≫ Adaptive Security Appliance Software Version 7.0.5
Cisco ≫ Adaptive Security Appliance Software Version 7.0.6
Cisco ≫ Adaptive Security Appliance Software Version 7.0.7
Cisco ≫ Adaptive Security Appliance Software Version 7.0.8
Cisco ≫ Adaptive Security Appliance Software Version 7.0.8 Update interim
Cisco ≫ Adaptive Security Appliance Software Version 7.1
Cisco ≫ Adaptive Security Appliance Software Version 7.1.1
Cisco ≫ Adaptive Security Appliance Software Version 7.1.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2.1
Cisco ≫ Adaptive Security Appliance Software Version 7.2.2
Cisco ≫ Adaptive Security Appliance Software Version 7.2.3
Cisco ≫ Adaptive Security Appliance Software Version 7.2.4
Cisco ≫ Adaptive Security Appliance Software Version 7.2.5
Cisco ≫ Adaptive Security Appliance Software Version 8.0
Cisco ≫ Adaptive Security Appliance Software Version 8.0.2
Cisco ≫ Adaptive Security Appliance Software Version 8.0.3
Cisco ≫ Adaptive Security Appliance Software Version 8.0.4
Cisco ≫ Adaptive Security Appliance Software Version 8.0.5
Cisco ≫ Adaptive Security Appliance Software Version 8.2.1
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2
Cisco ≫ Adaptive Security Appliance Software Version 8.2.2 Update interim
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.05% | 0.795 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://www.securitytracker.com/id?1024963
http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
http://www.securityfocus.com/bid/45768
https://exchange.xforce.ibmcloud.com/vulnerabilities/64574