CVE-2014-3392

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.6 before 8.61.15, 9.0 before 9.04.24, 9.1 before 9.15.12, 9.2 before 9.22.8, and 9.3 before 9.31.1 allows remote attackers to obtain sensitive information from process memory or modif...

CVE-2014-3392

CVE-2014-3392 affects Cisco ASA Clientless SSL VPN Portal. A memory disclosure/memory modification flaw in the portal could be exploited remotely by crafting parameters, impacting multiple software branches. Affected versions include ASA 8.2 (up to 8.2(5.50)), 8.3 (up to 8.3(2.41)), 8.4 (up to 8....