CVE-2008-2736

CVE-2008-2736 affects Cisco ASA 5500 series and PIX/ASA devices enabling clientless SSL VPN; vulnerability allows an attacker to obtain usernames and passwords via clientless VPN connections. Affected versions include ASA 5500 software 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5. Root cause relates ...