PT-2012-2509 · Cisco · Cisco Asa

Published 2012-05-02 · Updated 2023-08-15 · CVE-2012-0335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 through 8.4

Description The issue allows remote attackers to obtain sensitive information via a connection attempt due to improper proxy authentication during attempts to cut through a firewall. This could enable an unauthenticated, remote attacker to access sensitive information on a targeted system.

Recommendations For versions 7.2 through 8.4, update the software to a version that properly performs proxy authentication to prevent unauthorized access to sensitive information.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-0335

Affected Products

Cisco Asa

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120516-CVE-2012-0335 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0335 · Security Note
• http://secunia.com/advisories/49139 · Note
• http://securityfocus.com/bid/53558 · Note
• http://cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html · Note
• http://securitytracker.com/id?1027008 · Note