CVE-2012-0335

Cisco Adaptive Security Appliance Software 7.2-8.4 - Improper Authentication

Title source: llm
STIX 2.1

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53558
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49139
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027008

Scores

EPSS 0.0223
EPSS Percentile 80.5%

Details

CWE
CWE-287
Status published
Products (44)
cisco/5500_series_adaptive_security_appliance
cisco/adaptive_security_appliance_software 7.2
cisco/adaptive_security_appliance_software 7.2\(1\)
cisco/adaptive_security_appliance_software 7.2\(1.22\)
cisco/adaptive_security_appliance_software 7.2\(2\)
cisco/adaptive_security_appliance_software 7.2\(2.5\)
cisco/adaptive_security_appliance_software 7.2\(2.7\)
cisco/adaptive_security_appliance_software 7.2\(2.8\)
cisco/adaptive_security_appliance_software 7.2\(2.10\)
cisco/adaptive_security_appliance_software 7.2\(2.14\)
... and 34 more
Published May 02, 2012
Tracked Since Feb 18, 2026