Source |
The Hacker News |
Identifiant |
8618959 |
Date de publication |
2024-12-03 18:21:00 (vue: 2024-12-03 14:08:14) |
Titre |
Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability |
Texte |
Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA).
The vulnerability, tracked as CVE-2014-2120 (CVSS score: 4.3), concerns a case of insufficient input validation in ASA\'s WebVPN login page that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack
Cisco on Monday updated an advisory to warn customers of active exploitation of a decade-old security flaw impacting its Adaptive Security Appliance (ASA).
The vulnerability, tracked as CVE-2014-2120 (CVSS score: 4.3), concerns a case of insufficient input validation in ASA\'s WebVPN login page that could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack |
Notes |
★★
|
Envoyé |
Oui |
Condensat |
2014 2120 active adaptive advisory allow appliance asa attack attacker case cisco concerns conduct could cross customers cve cvss decade exploitation flaw impacting input insufficient its login monday old page remote score: scripting security site tracked unauthenticated updated validation vulnerability warn warns webvpn xss |
Tags |
Vulnerability
|
Stories |
|
Move |
|