CVE-2013-5537

The web framework on Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service management GUI outage via multiple T...

CVE-2013-5537

The CVE-2013-5537 issue affects Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA). The web framework does not properly manage HTTP/HTTPS session state, allowing an unauthenticated remote attacker to cause a denial of service (manag...

Cisco Ironport Bruteforce Login Utility

This module scans for Cisco Ironport SMA, WSA and ESA web login portals, finds AsyncOS versions, and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Cisco Web Security Appliance Version

The remote host is running Cisco Web Security Appliance WSA, a web gateway security appliance. It is possible to get the WSA version number via SSH or HTTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69081; scriptversion"1.11";...

CVE-2013-3395

CVE-2013-3395 describes a CSRF flaw in the web framework of Cisco IronPort products (Web Security Appliance, Email Security Appliance, Content Security Management Appliance). The vulnerability allows remote attackers to hijack the authentication of arbitrary users by inducing them to perform unwa...

PT-2013-4352

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance WSA devices affected versions not specified Cisco Email Security Appliance ESA devices affected versions not specified Cisco Content Security Management Appliance SMA devices affected versions not specifie...

CVE-2013-3395: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

Cisco IronPort Web Security Appliance basicConstraints Parameter Processing Man-in-the-Middle Vulnerability

Cisco IronPort Web Security Appliance WSA software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks against a targeted system. The vulnerability is in the insecure SSL implementation of the affected operating system due to improper...

CVE-2010-4690

The Mobile User Security MUS service on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 does not properly authenticate HTTP requests from a Web Security appliance WSA, which might allow remote attackers to obtain sensitive information via a HEAD request, aka B...