Design/Logic Flaw

2010-06-2918:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.3%

JSON

Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.

CPENameOperatorVersion
asa_5580eq<= 8.11

CPE	Name	Operator	Version
	asa_5580	eq	<= 8.11

References

www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html