medium5.0
CVE-2010-4690
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authentica…
Impact
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Adaptive Security Appliance Software | through 8.3\(1\) Versions 7.0, 7.0\(0\), 7.0\(2\), 7.0\(4\), 7.0\(5\) |
| Cisco | 5500 Series Adaptive Security Appliance | All versions |
| Cisco | Asa 5500 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42931
- http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
- http://www.securityfocus.com/bid/45768
- http://www.securitytracker.com/id?1024963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64574
- http://secunia.com/advisories/42931
- http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf
- http://www.securityfocus.com/bid/45768
- http://www.securitytracker.com/id?1024963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64574