A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, r…
High CVSS 7.5
Summary
A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certain SSL certificate verification steps. The vulnerability is due to incorrect verification of the SSL Client Certificate. An attacker could exploit this vulnerability by connecting to the ASA VPN without a proper private key and certif…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- http://www.securityfocus.com/bid/104018 Third Party Advisory
- http://www.securitytracker.com/id/1040723 Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1 Vendor Advisory
- http://www.securityfocus.com/bid/104018 Third Party Advisory
- http://www.securitytracker.com/id/1040723 Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1 Vendor Advisory
Timeline
- nvd_ingest NVD