PT-2014-4511 · Cisco · Webvpn+1

Publicado 2014-06-17 · Atualizado 2022-06-02 · CVE-2014-2151

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software version 8.4(.7.15) and earlier

Description A issue in the WebVPN portal allows remote authenticated users to obtain sensitive information via a crafted JavaScript file. This could enable an authenticated, remote attacker to view sensitive information from the affected system.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software version 8.4(.7.15) and earlier, consider disabling access to the WebVPN portal until a fix is available. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2014-2151

Produtos afetados

Cisco Asa

Webvpn

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-2151 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34627 · Aviso do Fabricante
• http://securitytracker.com/id/1030445 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2151 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140617-CVE-2014-2151 · Aviso do Fabricante
• http://securityfocus.com/bid/68063 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2151 · Nota