Cisco ASA SSL VPN Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA SSL VPN Privilege Escalation Vulnerability', 'Description' = %q This module exploits a privilege escalation vulnerability for Cisco ASA...

CVE-2014-2127

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/ciscosslvpnprivesc.rb 2024-04-17 16:28:47+00:00| seen| Telegram/3GeV2Gat4k406xD4RIUSpnXwSeYuBdQCNJ243H3ZC7lMo 2025-02-06...

CVE-2014-2127

CVE-2014-2127 affects Cisco ASA SSL VPN privilege escalation via improper handling of management-session information during privilege validation in SSL VPN portal connections. A remote authenticated user can gain privileges by establishing a Clientless SSL VPN session and supplying crafted URLs. ...