Not rated
CVE-2017-6752 A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an…
Description
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Adaptive Security Appliance | Versions not published |
References
- quickview.cloudapps.cisco.com quickview.cloudapps.cisco.com
- tools.cisco.com tools.cisco.com
- 1039057 www.securitytracker.com
- 100113 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Adaptive Security Appliance
The 11 CVEs of Cisco Adaptive Security Appliance →
CVE-2018-0251
A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal…
Not rated
CVE-2018-0240
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA)…
Not rated
CVE-2018-0231
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and…
Not rated
CVE-2018-0228
A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an…
Not rated