Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
BID:71765
Info
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
| Bugtraq ID: | 71765 |
| Class: | Design Error |
| CVE: |
CVE-2014-3410 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2014 12:00AM |
| Updated: | Jan 06 2015 01:02AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
Cisco Adaptive Security Appliance (ASA) Software is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to passwords that may aid in further attacks.
This issue is being tracked by Cisco Bug IDs CSCuq22357 and CSCur41860.
Cisco Adaptive Security Appliance (ASA) Software is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to passwords that may aid in further attacks.
This issue is being tracked by Cisco Bug IDs CSCuq22357 and CSCur41860.
Exploit / POC
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
Attackers can exploit this issue using browser or readily available tools.
Attackers can exploit this issue using browser or readily available tools.
Solution / Fix
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco Adaptive Security Appliance (ASA) Software CVE-2014-3410 Information Disclosure Vulnerability
References:
References:
- Cisco Homepage (Cisco )