PT-2014-4511 · Cisco · Webvpn+1

Published 2014-06-17 · Updated 2022-06-02 · CVE-2014-2151

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software version 8.4(.7.15) and earlier

Description A issue in the WebVPN portal allows remote authenticated users to obtain sensitive information via a crafted JavaScript file. This could enable an authenticated, remote attacker to view sensitive information from the affected system.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software version 8.4(.7.15) and earlier, consider disabling access to the WebVPN portal until a fix is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2014-2151

Affected Products

Cisco Asa

Webvpn

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-2151 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34627 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2151 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140617-CVE-2014-2151 · Vendor Advisory
• http://securitytracker.com/id/1030445 · Note
• http://securityfocus.com/bid/68063 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2151 · Note