5.3
CVE-2016-1295
- EPSS 1.98%
- Veröffentlicht 16.01.2016 05:59:07
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginCisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Software Version 8.4.0
Cisco ≫ Adaptive Security Appliance Software Version 8.4.1
Cisco ≫ Adaptive Security Appliance Software Version 8.4.1.3
Cisco ≫ Adaptive Security Appliance Software Version 8.4.1.11
Cisco ≫ Adaptive Security Appliance Software Version 8.4.2
Cisco ≫ Adaptive Security Appliance Software Version 8.4.2.1
Cisco ≫ Adaptive Security Appliance Software Version 8.4.2.8
Cisco ≫ Adaptive Security Appliance Software Version 8.4.3
Cisco ≫ Adaptive Security Appliance Software Version 8.4.3.8
Cisco ≫ Adaptive Security Appliance Software Version 8.4.3.9
Cisco ≫ Adaptive Security Appliance Software Version 8.4.4
Cisco ≫ Adaptive Security Appliance Software Version 8.4.4.1
Cisco ≫ Adaptive Security Appliance Software Version 8.4.4.3
Cisco ≫ Adaptive Security Appliance Software Version 8.4.4.5
Cisco ≫ Adaptive Security Appliance Software Version 8.4.4.9
Cisco ≫ Adaptive Security Appliance Software Version 8.4.5
Cisco ≫ Adaptive Security Appliance Software Version 8.4.5.6
Cisco ≫ Adaptive Security Appliance Software Version 8.4.6
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.3
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.15
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.22
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.23
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.26
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.28
Cisco ≫ Adaptive Security Appliance Software Version 8.4.7.29
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.98% | 0.788 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa
http://www.securitytracker.com/id/1034691