Non notée
CVE-2017-6752 A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an…
Description
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote attacker to determine valid usernames. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to the interaction between Lightweight Directory Access Protocol (LDAP) and SSL Connection Profile when they are configured together. An attacker could exploit the vulnerability by performing a username enumeration attack to the IP address of the device. An exploit could allow the attacker to determine valid usernames. Cisco Bug IDs: CSCvd47888.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Adaptive Security Appliance | Versions non publiées |
Références
- quickview.cloudapps.cisco.com quickview.cloudapps.cisco.com
- tools.cisco.com tools.cisco.com
- 1039057 www.securitytracker.com
- 100113 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Adaptive Security Appliance
Les 11 CVE de Cisco Adaptive Security Appliance →
CVE-2018-0251
A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal…
Non notée
CVE-2018-0240
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA)…
Non notée
CVE-2018-0231
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and…
Non notée
CVE-2018-0228
A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an…
Non notée