CVE-2015-6344 in ASA

Summary

The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 08/17/2015
• Disclosure: 10/30/2015
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 4.3
• EPSS: 0.00156
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6344
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6344
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6344/