CVE-2013-5557

Опубликовано: 07 фев. 2015

Источник: nvd

CVSS2: 6.3

EPSS Низкий

Описание

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of service (device crash or error-recovery event) via an HTTP request that triggers a rewrite, aka Bug ID CSCug91577.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557
Broken Link
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37383
Vendor Advisory
http://www.securityfocus.com/bid/72529
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100694
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5557
Broken Link
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=37383
Vendor Advisory
http://www.securityfocus.com/bid/72529
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100694
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

Версия до 9.1\(2\) (включая)

EPSS

Процентиль: 57%

0.00345

Низкий

6.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4gw4-f4xq-52c8

github

больше 3 лет назад