CVE-2014-8023

Cisco ASA Software 9.2(.3) and earlier is affected by a vulnerability in challenge‑response tunnel group selection. Improper implementation allows an authenticated remote attacker to bypass resource access restrictions by crafting a tunnel-group parameter, potentially enabling access to resources...