Cisco ASA and FTD Information Disclosure Vulnerability

🗓️ 15 Feb 2024 00:00:00Reported by CISAType

Cisco ASA and FTD info disclosure vulnerability. Attacker retrieves memory contents, leading to disclosure of confidential info due to buffer tracking issue with invalid URLs parsing. Specific to AnyConnect and WebVPN configurations

Reporter	Title	Published	Views	Family All 25
ICS	#StopRansomware: Akira Ransomware	18 Apr 202412:00	–	ics
ATTACKERKB	CVE-2020-3259	6 May 202000:00	–	attackerkb
Information Security Automation	February 2024: Vulremi, Vuldetta, PT VM Course relaunch, PT TrendVulns digests, Ivanti, Fortinet, MSPT, Linux PW	5 Mar 202418:43	–	avleonov
BDU FSTEC	The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to gain unauthorized access to protected information.	19 May 202000:00	–	bdu_fstec
Circl	CVE-2020-3259	1 Feb 202405:05	–	circl
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	15 Feb 202412:00	–	cisa
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability	6 May 202016:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software Web Services Information Disclosure (cisco-sa-asaftd-info-disclose-9eJtycMB)	19 Jun 202000:00	–	nessus
CNVD	Cisco Firepower Threat Defense and Adaptive Security Appliances Software Information Disclosure Vulnerability	7 May 202000:00	–	cnvd
CVE	CVE-2020-3259	6 May 202016:41	–	cve