Vulnerability Bulletins |
Cisco ASA CX Context-Aware Security Web GUI Unauthorized Access Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the web-based GUI of Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security could allow an authenticated, remote attacker to enumerate users and read user information without belonging to a role that allows those operations.The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by sending an HTTP request to a specific URL.Cisco has not released software updates that address this vulnerability. There are no More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151027-cas?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20ASA%20CX%20Context-Aware%20Security%20Web%20GUI%20Unauthorized%20Acces |
|