NVD

Id
30604  
Name
CVE-2014-2127  
Description
Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-10  
Modified Date
2014-04-10  
Seq
2014-2127  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161607 30604 CVE-2014-2127 20140409 Multiple Vulnerabilities in Cisco ASA Software  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13065 JVNDB-2014-001940 Cisco Adaptive Security Appliance ソフトウェアにおける権限を取得される脆弱性 Cisco Adaptive Security Appliance (ASA) ソフトウェアは、SSL VPN ポータル接続の権限検証中に管理セッション情報を適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2014-2127 69414 CVE-2014-2127 30604 8.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001940.html 2014-04-09 2014-04-11 View