5
CVE-2010-4690
- EPSS 0.5%
- Published 07.01.2011 23:00:19
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version <= 8.3\(1\)
Cisco ≫ Adaptive Security Appliance Software Version7.0
Cisco ≫ Adaptive Security Appliance Software Version7.0.1
Cisco ≫ Adaptive Security Appliance Software Version7.0.1.4
Cisco ≫ Adaptive Security Appliance Software Version7.0.2
Cisco ≫ Adaptive Security Appliance Software Version7.0.4
Cisco ≫ Adaptive Security Appliance Software Version7.0.4.3
Cisco ≫ Adaptive Security Appliance Software Version7.0.5
Cisco ≫ Adaptive Security Appliance Software Version7.0.6
Cisco ≫ Adaptive Security Appliance Software Version7.0.7
Cisco ≫ Adaptive Security Appliance Software Version7.0.8
Cisco ≫ Adaptive Security Appliance Software Version7.0.8 Updateinterim
Cisco ≫ Adaptive Security Appliance Software Version7.1
Cisco ≫ Adaptive Security Appliance Software Version7.1.1
Cisco ≫ Adaptive Security Appliance Software Version7.1.2
Cisco ≫ Adaptive Security Appliance Software Version7.2
Cisco ≫ Adaptive Security Appliance Software Version7.2.1
Cisco ≫ Adaptive Security Appliance Software Version7.2.2
Cisco ≫ Adaptive Security Appliance Software Version7.2.3
Cisco ≫ Adaptive Security Appliance Software Version7.2.4
Cisco ≫ Adaptive Security Appliance Software Version7.2.5
Cisco ≫ Adaptive Security Appliance Software Version8.0
Cisco ≫ Adaptive Security Appliance Software Version8.0.2
Cisco ≫ Adaptive Security Appliance Software Version8.0.3
Cisco ≫ Adaptive Security Appliance Software Version8.0.4
Cisco ≫ Adaptive Security Appliance Software Version8.0.5
Cisco ≫ Adaptive Security Appliance Software Version8.2.1
Cisco ≫ Adaptive Security Appliance Software Version8.2.2
Cisco ≫ Adaptive Security Appliance Software Version8.2.2 Updateinterim
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.5% | 0.629 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.