PT-2012-1682 · Cisco · Cisco Asa
CVE-2011-3285
·
Publicado
2012-05-02
·
Atualizado
2023-08-15
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.4
Description
A CRLF injection issue exists in the
/+CSCOE+/logon.html endpoint, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.Recommendations
For versions 8.0 through 8.4, update to a version that contains a fix for this issue.
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cisco Asa