EUVD-2014-7872

Malware in sbrugna...

Authentication flaw

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

PT-2015-3988

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.2.3 and earlier Description The issue allows remote authenticated users to bypass intended resource-access restrictions. This is due to the improper selection of tunnel groups when...