Authentication Bypass Vulnerability in Cisco Content Services Switch 11500

CVE-2010-1575

Summary

The Cisco Content Services Switch (CSS) 11500 with software version 08.20.1.01 is susceptible to an authentication bypass vulnerability. This issue arises from the manner in which the device handles ClientCert-* headers, which are used for authentication. Specifically, the CSS does not properly delete client-supplied ClientCert-* headers. As a result, this oversight may permit remote attackers to craft malicious header data aimed at bypassing the intended authentication mechanisms. An example of such an attack involves manipulating the ClientCert-Subject-CN header, effectively allowing unauthorized access. For details, reference advisories from security channels discussing similar vulnerabilities.

References