Vulnerability Bulletins |
Cisco Adaptive Security Appliance Information Disclosure Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional attacks.The vulnerability occurs because the Cisco ASA does not sufficiently protect sensitive data during a Cisco AnyConnect client authentication attempt. An attacker could exploit the vulnerability by attempting to authenticate to the Cisco ASA with AnyConnect.Cisco has released software updates More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-asa?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Adaptive%20Security%20Appliance%20Information%20Disclosure%20Vulnerabi |
|