PT-2012-2509 · Cisco · Cisco Asa
CVE-2012-0335
·
Publicado
2012-05-02
·
Atualizado
2023-08-15
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 through 8.4
Description
The issue allows remote attackers to obtain sensitive information via a connection attempt due to improper proxy authentication during attempts to cut through a firewall. This could enable an unauthenticated, remote attacker to access sensitive information on a targeted system.
Recommendations
For versions 7.2 through 8.4, update the software to a version that properly performs proxy authentication to prevent unauthorized access to sensitive information.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Asa