Cisco Secure Web Appliance Authentication Bypass Vulnerability — CISCO-SA-WSA-AUTH-BYPASS-6YZKTQHD
Cisco · Cisco · CISCO-SA-WSA-AUTH-BYPASS-6YZKTQHD
ID
CISCO-SA-WSA-AUTH-BYPASS-6YZKTQHD
CISCO-SA-WSA-AUTH-BYPASS-6YZKTQHD
Date
Activity
Source
Cisco
Cisco
Vendor
Cisco
Cisco
Threat
medium
medium
Summary
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication…
Product
Cisco Secure Web Appliance Authentication Bypass
What to do
General, cautious steps (verify details in the official source):
- Review exposure and plan remediation based on risk and environment.
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.