PT-2018-1772 · Cisco · Cisco Asa+2

Published 2018-04-18 · Updated 2023-08-15 · CVE-2018-0229

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication could allow an unauthenticated, remote attacker to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. The authentication would need to be done by an unsuspecting third party, aka Session Fixation. An attacker could exploit this vulnerability by persuading a user to click a crafted link and authenticating using the company's Identity Provider (IdP). A successful exploit could allow the attacker to hijack a valid authentication token and use that to establish an authenticated AnyConnect session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

BDU:2018-01372

CVE-2018-0229

Affected Products

Cisco Asa

Cisco Anyconnect Secure Mobility Client

Cisco Ftd

References · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asaanyconnect · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01372 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0229#vulnCurrentDescriptionTitle · Security Note
• https://osv.dev/vulnerability/CVE-2018-0229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0229 · Security Note
• http://securitytracker.com/id/1040712 · Note
• http://securityfocus.com/bid/103939 · Note
• http://securitytracker.com/id/1040711 · Note