CVE-2010-4680 The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled,...
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | <= 8.2\(2\) | No fix listed |
| cisco adaptive security appliance software | = 7.0 | No fix listed |
| cisco adaptive security appliance software | = 7.0(0) | No fix listed |
| cisco adaptive security appliance software | = 7.0(2) | No fix listed |
| cisco adaptive security appliance software | = 7.0(4) | No fix listed |
| cisco adaptive security appliance software | = 7.0(5) | No fix listed |
| cisco adaptive security appliance software | = 7.0(5.2) | No fix listed |
| cisco adaptive security appliance software | = 7.0(6.7) | No fix listed |
| cisco adaptive security appliance software | = 7.0.1 | No fix listed |
| cisco adaptive security appliance software | = 7.0.1.4 | No fix listed |
| cisco adaptive security appliance software | = 7.0.2 | No fix listed |
| cisco adaptive security appliance software | = 7.0.4 | No fix listed |
| cisco adaptive security appliance software | = 7.0.4.3 | No fix listed |
| cisco adaptive security appliance software | = 7.0.5 | No fix listed |
| cisco adaptive security appliance software | = 7.0.6 | No fix listed |
| cisco adaptive security appliance software | = 7.0.7 | No fix listed |
| cisco adaptive security appliance software | = 7.0.8 | No fix listed |
| cisco adaptive security appliance software | = 7.0.8-interim | No fix listed |
| cisco adaptive security appliance software | = 7.1 | No fix listed |
| cisco adaptive security appliance software | = 7.1(2) | No fix listed |
| cisco adaptive security appliance software | = 7.1(2.5) | No fix listed |
| cisco adaptive security appliance software | = 7.1(2.27) | No fix listed |
| cisco adaptive security appliance software | = 7.1(2.48) | No fix listed |
| cisco adaptive security appliance software | = 7.1(2.49) | No fix listed |
| cisco adaptive security appliance software | = 7.1(5) | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | = 7.1.1 | No fix listed |
| cisco adaptive security appliance software | = 7.1.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2(1) | No fix listed |
| cisco adaptive security appliance software | = 7.2(1.22) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.5) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.7) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.8) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.10) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.14) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.15) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.16) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.17) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.18) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.19) | No fix listed |
| cisco adaptive security appliance software | = 7.2(2.48) | No fix listed |
| cisco adaptive security appliance software | = 7.2.1 | No fix listed |
| cisco adaptive security appliance software | = 7.2.2 | No fix listed |
| cisco adaptive security appliance software | = 7.2.3 | No fix listed |
| cisco adaptive security appliance software | = 7.2.4 | No fix listed |
| cisco adaptive security appliance software | = 7.2.5 | No fix listed |
| cisco adaptive security appliance software | = 8.0 | No fix listed |
| cisco adaptive security appliance software | = 8.0.2 | No fix listed |
| cisco adaptive security appliance software | = 8.0.3 | No fix listed |
| cisco adaptive security appliance software | = 8.0.4 | No fix listed |
| cisco adaptive security appliance software | = 8.0.5 | No fix listed |
| cisco adaptive security appliance software | = 8.2(1) | No fix listed |
| cisco adaptive security appliance software | = 8.2.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2-interim | No fix listed |
| cisco 5500 series adaptive security appliance | All versions | No fix listed |
| cisco asa 5500 | All versions | No fix listed |
References
- 42931 third-party-advisory
- www.cisco.com
- 45767 vdb-entry
- 1024963 vdb-entry
- asa-webvpn-security-bypass(64606) vdb-entry