CVE-2014-2128

Cisco ASA 8.2-9.1 Authentication Bypass via Crafted Cookie/URL

Title source: llm
STIX 2.1

Description

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2) allows remote attackers to bypass authentication via (1) a crafted cookie value within modified HTTP POST data or (2) a crafted URL, aka Bug ID CSCua85555.

References (1)

Core 1
Core References

Scores

EPSS 0.0191
EPSS Percentile 77.2%

Details

CWE
CWE-287
Status published
Products (6)
cisco/adaptive_security_appliance_software 8.2
cisco/adaptive_security_appliance_software 8.3\(1\)
cisco/adaptive_security_appliance_software 8.4
cisco/adaptive_security_appliance_software 8.6
cisco/adaptive_security_appliance_software 9.0
cisco/adaptive_security_appliance_software 9.1
Published Apr 10, 2014
Tracked Since Feb 18, 2026