CVE-2009-4912

Currently unrated

Key Information:

Vendor
Cisco
Status
Asa 5580
Vendor
CVE Published:
29 June 2010

Summary

Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.

References

http://www.cisco.com/en/US/docs/security/asa/asa81/releas...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.