Authentication Bypass Vulnerability in Cisco Content Services Switch 11500

CVE-2010-1575

What is CVE-2010-1575?

The Cisco Content Services Switch (CSS) 11500 with software version 08.20.1.01 is susceptible to an authentication bypass vulnerability. This issue arises from the manner in which the device handles ClientCert-* headers, which are used for authentication. Specifically, the CSS does not properly delete client-supplied ClientCert-* headers. As a result, this oversight may permit remote attackers to craft malicious header data aimed at bypassing the intended authentication mechanisms. An example of such an attack involves manipulating the ClientCert-Subject-CN header, effectively allowing unauthorized access. For details, reference advisories from security channels discussing similar vulnerabilities.

References