CVE-2019-1672

A vulnerability in the Decryption Policy Default Action functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass a configured drop policy and allow traffic onto the network that should have been denied. The vulnerability is due to the incorre...

CVE-2016-9212

Cisco Web Security Appliance (WSA) Drop Decrypt Policy Bypass (CVE-2016-9212) is caused by incomplete HTTP header input validation in the Decrypt for End-User Notification configuration. Under HTTPS decryption, an unauthenticated remote attacker could connect to a blocked HTTPS website despite po...

PT-2016-7708

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliances versions 9.0.1-162 through 9.1.1-074 Description A vulnerability in the Decrypt for End-User Notification configuration parameter could allow an unauthenticated, remote attacker to connect to a secure website over...