PT-2017-17291 · Cisco · Cisco Web Security Appliance

Published 2017-07-25 · Updated 2021-04-05 · CVE-2017-6751

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance (WSA) versions 9.0.0-485 through 10.1.0-204

Description A vulnerability in the web proxy functionality could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface to the administrative management interface, effectively bypassing access controls. This issue affects both virtual and hardware versions of the Cisco Web Security Appliance.

Recommendations For versions 9.0.0-485 through 10.1.0-204, consider restricting access to the administrative management interface until a patch is available. As a temporary workaround, consider disabling the web proxy functionality to minimize the risk of exploitation. Restrict access to the web proxy interface to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-6751

Affected Products

Cisco Web Security Appliance

References · 6

• https://osv.dev/vulnerability/CVE-2017-6751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6751 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa5 · Vendor Advisory
• https://t.me/cvenotify/12669 · Telegram Post
• http://securityfocus.com/bid/99967 · Note
• http://securitytracker.com/id/1038959 · Note