Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1714

Опубликовано: 03 мая 2019
Источник: nvd
CVSS3: 5.8
CVSS3: 8.6
CVSS2: 5
EPSS Низкий

Описание

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to successfully establish a VPN session to an affected device. The vulnerability is due to improper credential management when using NT LAN Manager (NTLM) or basic authentication. An attacker could exploit this vulnerability by opening a VPN session to an affected device after another VPN user has successfully authenticated to the affected device via SAML SSO. A successful exploit could allow the attacker to connect to secured networks behind the affected device.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия от 6.2.1 (включая) до 6.2.3.12 (исключая)
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
Версия от 6.3.0 (включая) до 6.3.0.3 (исключая)
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Версия от 9.7 (включая) до 9.8.4 (исключая)
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Версия от 9.9 (включая) до 9.9.2.50 (исключая)
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Версия от 9.10 (включая) до 9.10.1.17 (исключая)

Одно из

cpe:2.3:a:cisco:adaptive_security_virtual_appliance:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5506-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5506h-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5506w-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5508-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5516-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5525-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5545-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asa-5555-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.01652
Низкий

5.8 Medium

CVSS3

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-255
NVD-CWE-Other

Связанные уязвимости

github логотип

GHSA-c2pv-f87v-p3wc

CVSS3: 8.6
github
больше 3 лет назад

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to successfully establish a VPN session to an affected device. The vulnerability is due to improper credential management when using NT LAN Manager (NTLM) or basic authentication. An attacker could exploit this vulnerability by opening a VPN session to an affected device after another VPN user has successfully authenticated to the affected device via SAML SSO. A successful exploit could allow the attacker to connect to secured networks behind the affected device.

fstec логотип

BDU:2019-01877

CVSS3: 5.8
fstec
почти 7 лет назад

Уязвимость реализации языка Security Assertion Markup Language (SAML) межсетевых экранов Cisco Adaptive Security Appliance и Cisco Firepower Threat Defense, позволяющая нарушителю обойти процедуру аутентификации

EPSS

Процентиль: 82%
0.01652
Низкий

5.8 Medium

CVSS3

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-255
NVD-CWE-Other