Cisco ASA XAUTH Bypass Vulnerability (Cisco-SA-20150602-CVE-2015-0760)

A vulnerability in IKE version 1 code of Cisco ASA Software could allow an authenticated, remote attacker to bypass Extended Authentication XAUTH and successfully log in via IPsec remote VPN. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

CVE-2015-0760

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...

CVE-2015-0760

Cisco ASA Software versions 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 contain a vulnerability in the IKEv1 code that can be exploited by an authenticated, remote attacker to bypass XAUTH authentication via crafted IKEv1 packets. The issue (Bug CSCus47259) allows bypass of Extended Authenticati...