CVE-2010-4690
07.01.2011, 23:00
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | adaptive_security_appliance_software | 𝑥 ≤ 8.3\(1\) |
| cisco | adaptive_security_appliance_software | 7.0 |
| cisco | adaptive_security_appliance_software | 7.0\(0\) |
| cisco | adaptive_security_appliance_software | 7.0\(2\) |
| cisco | adaptive_security_appliance_software | 7.0\(4\) |
| cisco | adaptive_security_appliance_software | 7.0\(5\) |
| cisco | adaptive_security_appliance_software | 7.0\(5.2\) |
| cisco | adaptive_security_appliance_software | 7.0\(6.7\) |
| cisco | adaptive_security_appliance_software | 7.0.1 |
| cisco | adaptive_security_appliance_software | 7.0.1.4 |
| cisco | adaptive_security_appliance_software | 7.0.2 |
| cisco | adaptive_security_appliance_software | 7.0.4 |
| cisco | adaptive_security_appliance_software | 7.0.4.3 |
| cisco | adaptive_security_appliance_software | 7.0.5 |
| cisco | adaptive_security_appliance_software | 7.0.6 |
| cisco | adaptive_security_appliance_software | 7.0.7 |
| cisco | adaptive_security_appliance_software | 7.0.8 |
| cisco | adaptive_security_appliance_software | 7.0.8:interim |
| cisco | adaptive_security_appliance_software | 7.1 |
| cisco | adaptive_security_appliance_software | 7.1\(2\) |
| cisco | adaptive_security_appliance_software | 7.1\(2.5\) |
| cisco | adaptive_security_appliance_software | 7.1\(2.27\) |
| cisco | adaptive_security_appliance_software | 7.1\(2.48\) |
| cisco | adaptive_security_appliance_software | 7.1\(2.49\) |
| cisco | adaptive_security_appliance_software | 7.1\(5\) |
| cisco | adaptive_security_appliance_software | 7.1.1 |
| cisco | adaptive_security_appliance_software | 7.1.2 |
| cisco | adaptive_security_appliance_software | 7.2 |
| cisco | adaptive_security_appliance_software | 7.2\(1\) |
| cisco | adaptive_security_appliance_software | 7.2\(1.22\) |
| cisco | adaptive_security_appliance_software | 7.2\(2\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.5\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.7\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.8\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.10\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.14\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.15\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.16\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.17\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.18\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.19\) |
| cisco | adaptive_security_appliance_software | 7.2\(2.48\) |
| cisco | adaptive_security_appliance_software | 7.2.1 |
| cisco | adaptive_security_appliance_software | 7.2.2 |
| cisco | adaptive_security_appliance_software | 7.2.3 |
| cisco | adaptive_security_appliance_software | 7.2.4 |
| cisco | adaptive_security_appliance_software | 7.2.5 |
| cisco | adaptive_security_appliance_software | 8.0 |
| cisco | adaptive_security_appliance_software | 8.0.2 |
| cisco | adaptive_security_appliance_software | 8.0.3 |
| cisco | adaptive_security_appliance_software | 8.0.4 |
| cisco | adaptive_security_appliance_software | 8.0.5 |
| cisco | adaptive_security_appliance_software | 8.2\(1\) |
| cisco | adaptive_security_appliance_software | 8.2\(2\) |
| cisco | adaptive_security_appliance_software | 8.2\(3\) |
| cisco | adaptive_security_appliance_software | 8.2\(3.9\) |
| cisco | adaptive_security_appliance_software | 8.2\(4\) |
| cisco | adaptive_security_appliance_software | 8.2.1 |
| cisco | adaptive_security_appliance_software | 8.2.2 |
| cisco | adaptive_security_appliance_software | 8.2.2:interim |
| cisco | 5500_series_adaptive_security_appliance | * |
| cisco | asa_5500 | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References