CVE-2015-6344

Cisco ASA CX Context-Aware Security 9.3(4.1.11) - Authenticated Sensitive Information Exposure

Title source: llm

Description

The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034001

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-cas

Scores

EPSS 0.0137

EPSS Percentile 68.6%

Details

CWE

CWE-200

Status published

Products (1)

cisco/asa_cx_context-aware_security_software 9.3.4.1.11

Published Oct 30, 2015

Tracked Since Feb 18, 2026