CVEvulnerability
CVE-2010-4690
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.
Affected configurations
• cisco adaptive security appliance software (<= 8.3\(1\))
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.1\(2\)
• cisco adaptive security appliance software 7.1\(2.5\)
• cisco adaptive security appliance software 7.1\(2.27\)
• cisco adaptive security appliance software 7.1\(2.48\)
• cisco adaptive security appliance software 7.1\(2.49\)
• cisco adaptive security appliance software 7.1\(5\)
• cisco adaptive security appliance software 7.1.1
• cisco adaptive security appliance software 7.1.2
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
• cisco adaptive security appliance software 8.0.5
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2\(2\)
• cisco adaptive security appliance software 8.2\(3\)
• cisco adaptive security appliance software 8.2\(3.9\)
• cisco adaptive security appliance software 8.2\(4\)
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.2
• cisco 5500 series adaptive security appliance
• cisco asa 5500
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf www.cisco.com
- http://www.securityfocus.com/bid/45768 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64574 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42931 secunia.com
- http://www.cisco.com/en/US/docs/security/asa/asa83/release/notes/asarn83.pdf www.cisco.com
- http://www.securityfocus.com/bid/45768 www.securityfocus.com
- http://www.securitytracker.com/id?1024963 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64574 exchange.xforce.ibmcloud.com