Cisco Adaptive Security Device Manager Brute Force Authentication Bypass Vulnerability

Bugtraq ID:	64637
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 02 2013 12:00AM
Updated:	Dec 02 2013 12:00AM
Credit:	Jonathan Claudius, Trustwave's SpiderLabs.
Vulnerable:
Not Vulnerable:

Cisco Adaptive Security Device Manager Brute Force Authentication Bypass Vulnerability

Cisco Adaptive Security Device Manager is prone to an authentication-bypass vulnerability because it fails to protect against brute-force attacks.

An attacker can exploit this issue to bypass the authentication process and gain unauthorized access to the affected system. Successfully exploiting this issue may lead to further attacks.

Cisco Adaptive Security Device Manager Brute Force Authentication Bypass Vulnerability

An attacker can use readily available tools to exploit this issue.

Cisco Adaptive Security Device Manager Brute Force Authentication Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Adaptive Security Device Manager Brute Force Authentication Bypass Vulnerability

References:

• Cisco Adaptive Security Device Manager Homepage (Cisco)
  
• Github: Exploit code for Cisco ASA ASDM (Github)