NVD

Id
49872  
Name
CVE-2009-2631  
Description
Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN"s domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-04  
Modified Date
2010-12-21  
Seq
2009-2631  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252113 49872 CVE-2009-2631 http://kb.juniper.net/KB15799  View
252114 49872 CVE-2009-2631 20060608 SSL VPNs and security  View
252115 49872 CVE-2009-2631 20060609 Re: SSL VPNs and security  View
252116 49872 CVE-2009-2631 20060609 Re: SSL VPNs and security  View
252117 49872 CVE-2009-2631 1023255  View
252118 49872 CVE-2009-2631 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=984744  View
252119 49872 CVE-2009-2631 VU#261869  View
252120 49872 CVE-2009-2631 20091202 Same-origin policy bypass vulnerabilities in several VPN products reported  View
252121 49872 CVE-2009-2631 37152  View
252122 49872 CVE-2009-2631 http://www.sonicwall.com/us/2123_14882.html  View
252123 49872 CVE-2009-2631 http://www.sonicwall.com/us/2123_14883.html  View
252124 49872 CVE-2009-2631 http://www.stonesoft.com/en/support/security_advisories/2009_03_12.html  View
252125 49872 CVE-2009-2631 ADV-2009-3567  View
252126 49872 CVE-2009-2631 ADV-2009-3568  View
252127 49872 CVE-2009-2631 ADV-2009-3569  View
252128 49872 CVE-2009-2631 ADV-2009-3570  View
252129 49872 CVE-2009-2631 ADV-2009-3571  View
252130 49872 CVE-2009-2631 http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/50/025367-01.pdf  View
252131 49872 CVE-2009-2631 sslvpn-sameorigin-security-bypass(54523)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41419 JVNDB-2009-002426 複数の SSL VPN (Web VPN) 製品においてウェブブラウザのセキュリティが迂回される問題 複数の SSL VPN (Web VPN) 製品には、ウェブブラウザのセキュリティメカニズムを迂回可能な問題が存在します。 CVE-2009-2631 40062 CVE-2009-2631 49872 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002426.html 2009-12-01 2010-01-20 View