VulnerabilityModified
CVE-2012-0335
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a…
MEDIUM 5.0EPSS 2.21%
Does this matter?
Lower severity and a low EPSS score (2.21%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall, which allows remote attackers to obtain sensitive information via a connection attempt, aka Bug ID CSCtx42746.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.21% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- cisco/adaptive security appliance software · cisco/5500 series adaptive security appliance
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/49139
- http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
- http://www.securityfocus.com/bid/53558
- http://www.securitytracker.com/id?1027008
- http://secunia.com/advisories/49139
- http://www.cisco.com/web/software/280775065/89203/ASA-843-Interim-Release-Notes.html
- http://www.securityfocus.com/bid/53558
- http://www.securitytracker.com/id?1027008
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.