CVEvulnerability
CVE-2010-4680
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.
Affected configurations
• cisco adaptive security appliance software (<= 8.2\(2\))
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.1\(2\)
• cisco adaptive security appliance software 7.1\(2.5\)
• cisco adaptive security appliance software 7.1\(2.27\)
• cisco adaptive security appliance software 7.1\(2.48\)
• cisco adaptive security appliance software 7.1\(2.49\)
• cisco adaptive security appliance software 7.1\(5\)
• cisco adaptive security appliance software 7.1.1
• cisco adaptive security appliance software 7.1.2
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
• cisco adaptive security appliance software 8.0.5
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.2
• cisco 5500 series adaptive security appliance
• cisco asa 5500
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45767 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64606 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf www.cisco.com
- http://www.securityfocus.com/bid/45767 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64606 exchange.xforce.ibmcloud.com