CVE-2015-0624 in Cisco Web Security Appliance

Summary

The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.

Reservation

01/07/2015

Disclosure

02/21/2015

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
69203	Cisco Web Security Appliance URL input validation	20	Unproven	Official fix	CVE-2015-0624
69202	Cisco Mail Security Appliance URL input validation	20	Unproven	Official fix	CVE-2015-0624