VMware NSX Edge Information Disclosure (VMSA-2016-0007)

The version of VMware NSX Edge installed on the remote host is 6.1.x prior to 6.1.7 or 6.2.x prior to 6.2.3. It is, therefore, affected by a flaw in the SSL-VPN feature due to improper validation of input. An unauthenticated, remote attacker can exploit this to disclose potentially sensitive...

OpenVPN: Multiple vulnerabilities

Background OpenVPN is a multi-platform, full-featured SSL VPN solution. Description Multiple vulnerabilities have been discovered in OpenVPN. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to recover plaintext from encrypted communications...

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

Fortinet FortiClient SSLVPN Local Information Disclosure Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A local information disclosure vulnerability exists in Fortinet FortiClient SSLVPN version 5.4, which could be exploited by attackers to obtain sensitive informati...

Cisco ASA AnyConnect Client Authentication Attempt Handling Information Disclosure (cisco-sa-20160115-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an information disclosure vulnerability due to a failure to protect sensitive data during a Cisco AnyConnect client authentication attempt. An unauthenticated...

Cisco ASA AnyConnect Client Authentication Attempt Handling Information Disclosure (cisco-sa-20160115-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an information disclosure vulnerability due to a failure to protect sensitive data during a Cisco AnyConnect client authentication attempt. An unauthenticated...

Cisco ASA SSL VPN Functionality Version Information Disclosure (CSCuq65542)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software on the remote device is affected by an information disclosure vulnerability in the SSL VPN feature due to improperly returning verbose response data. An unauthenticated, remote attacker can exploit this...

CVE-2016-2079

VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2079

VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2079

Affected products/versions: VMware NSX Edge 6.1.x (before 6.1.7) and NSX Edge 6.2.x (before 6.2.3); vCNS Edge 5.5.x (before 5.5.4.3).** Vulnerability summary: A flaw in the SSL-VPN feature causes improper input validation, enabling an unauthenticated, remote attacker to disclose potentially sensi...

VMware NSX and vCNS product updates address a critical information disclosure vulnerability

a. VMware NSX and vCNS critical information disclosure vulnerability VMware NSX and vCNS with SSL-VPN enabled contain a critical input validation vulnerability. This issue may allow a remote attacker to gain access to sensitive information. The Common Vulnerabilities and Exposures project...

VMSA-2016-0007:VMware NSX and vCNS product updates address a CRITICAL information disclosure vulnerability

VMSA-2016-0007.2 VMware NSX and vCNS product updates address a critical information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0007.2 VMware Security Advisory Synopsis: VMware NSX and vCNS product updates address a critical information...

Cisco Adaptive Security Appliance XML Parser Denial of Service Vulnerability

A vulnerability in XML parser code of Cisco Adaptive Security Appliance Software could allow an authenticated, remote attacker to cause system instability or a reload of the affected system. The vulnerability is due to insufficient hardening of the XML parser configuration. An attacker could...

Cisco IOS Software SSL VPN Denial of Service Vulnerability (cisco-sa-20140326-ios-sslvpn)

A vulnerability in the Secure Sockets Layer SSL VPN subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Palo Alto PAN-OS Unauthenticated Buffer Overflow (PAN-SA-2016-0005) - Active Check

When a PAN-OS device is configured as a GlobalProtect portal, a vulnerability exists where an improper handling of a buffer involved in the processing of SSL VPN requests can result in device crash and possible remote code execution RCE. SPDX-FileCopyrightText: 2016 Greenbone AG Some text...

CVE-2016-3657

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service device crash or possibly execute arbitrary code via an SSL VPN request...

Buffer overflow

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service device crash or possibly execute arbitrary code via an SSL VPN request...

CVE-2016-3657

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service device crash or possibly execute arbitrary code via an SSL VPN request...

CVE-2016-3657

CVE-2016-3657 describes an unauthenticated buffer overflow in the GlobalProtect SSL VPN web portal of Palo Alto Networks PAN-OS. Public details indicate that improper handling of a buffer during SSL VPN request processing can crash the device and may allow remote code execution. Affected PAN-OS v...