8.1
Élevée
CVE-2018-15465 A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an…
Description
A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Adaptive Security Appliance (ASA) Software | Versions non publiées |
Références
- 106256 www.securityfocus.com
- www.tenable.com www.tenable.com
- 20181219 Cisco Adaptive Security Appliance Software Privilege Escalation Vulnerability tools.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Adaptive Security Appliance (ASA) Software
Les 161 CVE de Cisco Adaptive Security Appliance (ASA) Software →
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…
9.0
Critique
CVE-2025-20254
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security…
5.8
Moyenne
CVE-2025-20263
A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and…
8.6
Élevée
CVE-2025-20253
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure…
8.6
Élevée