 |
Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | ||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.105986 |
| Kategorie: | CISCO |
| Titel: | Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability |
| Zusammenfassung: | The Clientless SSL VPN Portal of Cisco ASA is prone to a customization;integrity vulnerability. |
| Beschreibung: | Summary: The Clientless SSL VPN Portal of Cisco ASA is prone to a customization integrity vulnerability. Vulnerability Insight: A vulnerability in the Clientless SSL VPN portal customization framework could allow an unauthenticated, remote attacker to modify the content of the Clientless SSL VPN portal, which could lead to several attacks including the stealing of credentials, cross-site scripting (XSS), and other types of web attacks on the client using the affected system. The vulnerability is due to an improper implementation of authentication checks in the Clientless SSL VPN portal customization framework. Vulnerability Impact: An unauthenticated, remote attacker could exploit this vulnerability by modifying some of the customization objects in the RAMFS cache file system. An exploit could allow the attacker to bypass Clientless SSL VPN authentication and modify the portal content. If successful, the attacker could conduct web-based attacks against a client using the affected software, which could be used to access sensitive information. Affected Software/OS: Version 8.2, 8.3, 8.4, 8.6, 9.0, 9.1 and 9.2 Solution: Apply the appropriate updates from Cisco. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N |
| Querverweis: |
BugTraq ID: 70309 Common Vulnerability Exposure (CVE) ID: CVE-2014-3393 Cisco Security Advisory: 20141008 Multiple Vulnerabilities in Cisco ASA Software http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa |
| Copyright | Copyright (C) 2015 Greenbone Networks GmbH |
| Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |