CVE-2010-4690

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.

Weaknesses (CWE)

CWE-287

Affected Products (62)

cisco · adaptive_security_appliance_softwarevulnerable

cisco · adaptive_security_appliance_software

References (10)

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf

http://www.securityfocus.com/bid/45768

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64574

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf

http://www.securityfocus.com/bid/45768

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64574