Cisco ASA HTTP Server Information Disclosure (CSCun78551)

According to its banner, the version of the remote Cisco ASA device is affected by an information disclosure vulnerability in the HTTP server. An authenticated, remote attacker can exploit this, via a specially crafted URL, to access arbitrary files on the device. Note that this issue affects...

CVE-2014-2181

CVE-2014-2181 affects Cisco ASA Software. An authenticated, remote attacker could exploit the HTTP server to read arbitrary files on the device (e.g., running configuration) via a crafted URL, due to improper authorization in the HTTP server component. Public sources in the connected documents co...