EUVD-2019-10373

Malware in sbrugna...

CVE-2020-3367: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance formerly Web Security Appliance could allow an authenticated, local attacker to perform command injection and elevate privileges to root. This vulnerability is due to insufficient validation of...

PT-2020-4961

Name of the Vulnerable Software and Affected Versions Cisco Secure Web Appliance formerly Web Security Appliance versions not specified Description A vulnerability in the log subscription subsystem of Cisco AsyncOS could allow an authenticated, local attacker to perform command injection and...

CVE-2019-1816: Improper Input Validation

A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance WSA could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The vulnerability is due to insufficient validation of user-supplied input on the web and command-lin...

PT-2019-2121 · Cisco · Cisco Web Security Appliance

Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance WSA affected versions not specified Description: A vulnerability in the log subscription subsystem could allow an authenticated, local attacker to perform command injection and elevate privileges to root. This iss...