5
CVE-2012-0335
- EPSS 2.23%
- Veröffentlicht 02.05.2012 10:09:21
- Zuletzt bearbeitet 16.06.2026 23:37:07
- Quelle psirt@cisco.com
- CVE-Watchlists
- Unerledigt
LoginCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version7.2
Cisco ≫ Adaptive Security Appliance Software Version7.2.1
Cisco ≫ Adaptive Security Appliance Software Version7.2.2
Cisco ≫ Adaptive Security Appliance Software Version7.2.3
Cisco ≫ Adaptive Security Appliance Software Version7.2.4
Cisco ≫ Adaptive Security Appliance Software Version7.2.5
Cisco ≫ Adaptive Security Appliance Software Version8.2.1
Cisco ≫ Adaptive Security Appliance Software Version8.2.2
Cisco ≫ Adaptive Security Appliance Software Version8.2.2 Updateinterim
Cisco ≫ Adaptive Security Appliance Software Version8.2.3
Cisco ≫ Adaptive Security Appliance Software Version8.3.1
Cisco ≫ Adaptive Security Appliance Software Version8.3.1 Updateinterim
Cisco ≫ Adaptive Security Appliance Software Version8.3.2
Cisco ≫ Adaptive Security Appliance Software Version8.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.23% | 0.805 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://www.securitytracker.com/id?1027008
http://secunia.com/advisories/49139
http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
http://www.securityfocus.com/bid/53558