Vulnerability Description
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Asa 5580 | <= 8.1\(1\) |
Related Weaknesses (CWE)
References
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
- http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.htmlPatch
FAQ
What is CVE-2009-4912?
CVE-2009-4912 is a vulnerability with a CVSS score of 10.0 (HIGH). Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote at...
How severe is CVE-2009-4912?
CVE-2009-4912 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4912?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Asa 5580.