Cisco ASA Software SSL VPN Feature Authentication Bypass Vulnerability

Bugtraq ID:	66746
Class:	Design Error
CVE:	CVE-2014-2128
Remote:	Yes
Local:	No
Published:	Apr 09 2014 12:00AM
Updated:	Apr 09 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco ASA Software SSL VPN Feature Authentication Bypass Vulnerability

Cisco ASA Software is prone to a remote authentication-bypass vulnerability.

Exploiting this issue could allow an attacker to bypass certain security restrictions and gain unauthenticated access to the SSL VPN Portal page.

This issue is tracked by Cisco Bug ID CSCua85555.

Cisco ASA Software SSL VPN Feature Authentication Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco ASA Software SSL VPN Feature Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco ASA Software SSL VPN Feature Authentication Bypass Vulnerability

References:

• Cisco Homepage (Cisco )