Cisco Adaptive Security Appliance CVE-2015-0760 XAUTH Security Bypass Vulnerability

Bugtraq ID:	74957
Class:	Design Error
CVE:	CVE-2015-0760
Remote:	Yes
Local:	No
Published:	Jun 02 2015 12:00AM
Updated:	Jun 02 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Adaptive Security Appliance (ASA) Software 8.2.2 9 Cisco Adaptive Security Appliance (ASA) Software 8.2.2 10 Cisco Adaptive Security Appliance (ASA) Software 8.1.6 Cisco Adaptive Security Appliance (ASA) Software 8.1.2 Cisco Adaptive Security Appliance (ASA) Software 8.1.1 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 31 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 28 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 27 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 25 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 23 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 20 Cisco Adaptive Security Appliance (ASA) Software 8.0.5 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 9 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 33 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 32 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 31 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 28 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 25 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 23 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 16 Cisco Adaptive Security Appliance (ASA) Software 8.0.4 Cisco Adaptive Security Appliance (ASA) Software 8.0.3 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 8 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 7 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 4 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 2 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 12 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 10 Cisco Adaptive Security Appliance (ASA) Software 7.2.5 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 9 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 6 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 33 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 30 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 27 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 25 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 18 Cisco Adaptive Security Appliance (ASA) Software 7.2.4 Cisco Adaptive Security Appliance (ASA) Software 7.2.3 16 Cisco Adaptive Security Appliance (ASA) Software 7.2.3 12 Cisco Adaptive Security Appliance (ASA) Software 7.2.3 1 Cisco Adaptive Security Appliance (ASA) Software 7.2.3 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 6 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 34 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 22 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 19 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 18 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 14 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 10 Cisco Adaptive Security Appliance (ASA) Software 7.2.2 Cisco Adaptive Security Appliance (ASA) Software 7.2.1 9 Cisco Adaptive Security Appliance (ASA) Software 7.2.1 24 Cisco Adaptive Security Appliance (ASA) Software 7.2.1 19 Cisco Adaptive Security Appliance (ASA) Software 7.2.1 13 Cisco Adaptive Security Appliance (ASA) Software 7.0.8 8 Cisco Adaptive Security Appliance (ASA) Software 7.0.8 2 Cisco Adaptive Security Appliance (ASA) Software 7.0.8 13 Cisco Adaptive Security Appliance (ASA) Software 7.0.8 12 Cisco Adaptive Security Appliance (ASA) Software 7.0.8 Cisco Adaptive Security Appliance (ASA) Software 7.0.7 9 Cisco Adaptive Security Appliance (ASA) Software 7.0.7 4 Cisco Adaptive Security Appliance (ASA) Software 7.0.7 12 Cisco Adaptive Security Appliance (ASA) Software 7.0.7 1 Cisco Adaptive Security Appliance (ASA) Software 7.0.7 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 8 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 4 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 32 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 29 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 26 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 22 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 18 Cisco Adaptive Security Appliance (ASA) Software 7.0.6 Cisco Adaptive Security Appliance (ASA) Software 7.0.5 12 Cisco Adaptive Security Appliance (ASA) Software 7.0.5 Cisco Adaptive Security Appliance (ASA) Software 7.0.4 2 Cisco Adaptive Security Appliance (ASA) Software 7.0.4 Cisco Adaptive Security Appliance (ASA) Software 7.0.3 Cisco Adaptive Security Appliance (ASA) Software 7.0.2 Cisco Adaptive Security Appliance (ASA) Software 7.0.1 4 Cisco Adaptive Security Appliance (ASA) Software 8.2.2.12 Cisco Adaptive Security Appliance (ASA) Software 8.2.1.11 Cisco Adaptive Security Appliance (ASA) Software 8.2.0.45 Cisco Adaptive Security Appliance (ASA) Software 8.1.2.56 Cisco Adaptive Security Appliance (ASA) Software 8.1.2.55 Cisco Adaptive Security Appliance (ASA) Software 8.1.2.50 Cisco Adaptive Security Appliance (ASA) Software 8.0.2.15 Cisco Adaptive Security Appliance (ASA) Software 8.0.2.11 Cisco Adaptive Security Appliance (ASA) Software 8.0.1.2 Cisco Adaptive Security Appliance (ASA) Software 8.0.0 Cisco Adaptive Security Appliance (ASA) Software 7.2.1 Cisco Adaptive Security Appliance (ASA) Software 7.2(5.16) Cisco Adaptive Security Appliance (ASA) Software 7.2(5.15) Cisco Adaptive Security Appliance (ASA) Software 7.2(5.12) Cisco Adaptive Security Appliance (ASA) Software 7.0.1 Cisco Adaptive Security Appliance (ASA) Software 7.0
Not Vulnerable:	Cisco Adaptive Security Appliance (ASA) Software 8.2.2.13

Cisco Adaptive Security Appliance CVE-2015-0760 XAUTH Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Adaptive Security Appliance CVE-2015-0760 XAUTH Security Bypass Vulnerability

References:

• Vulnerability Alert: Cisco Adaptive Security Appliance XAUTH Bypass Vulnerabili (Cisco)
  
• Cisco Homepage (Cisco)