Описание
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
Уязвимые конфигурации
Конфигурация 1Версия до 8.1\(1\) (включая)
cpe:2.3:h:cisco:asa_5580:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.0028
Низкий
10 Critical
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
почти 4 года назад
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
EPSS
Процентиль: 51%
0.0028
Низкий
10 Critical
CVSS2
Дефекты
CWE-264