CVEvulnerability

CVE-2017-6751

7.5 HIGH Published 2017-07-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485.

Affected configurations

• cisco web security appliance 9.0.0-162 • cisco web security appliance 9.0.0-193 • cisco web security appliance 9.0.0-485 • cisco web security appliance 10.0.0-232 • cisco web security appliance 10.0.0-233 • cisco web security appliance 10.1.0-204 • cisco web security virtual appliance 9.0.0 • cisco web security virtual appliance 10.0.0 • cisco web security virtual appliance 10.1.0 • cisco web security virtual appliance 10.1.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References