| ID |
CVE-2016-1296
|
| Summary |
The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:cisco:web_security_appliance:8.5.3-055:*:*:*:*:*:*:*
cpe:2.3:a:cisco:web_security_appliance:8.5.3-055:*:*:*:*:*:*:*
-
cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*
cpe:2.3:a:cisco:web_security_appliance:9.1.0-000:*:*:*:*:*:*:*
-
cpe:2.3:a:cisco:web_security_appliance:9.5.0-235:*:*:*:*:*:*:*
cpe:2.3:a:cisco:web_security_appliance:9.5.0-235:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 07-12-2016 - 23:38) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-254 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
| refmap
via4
|
| cisco | 20160119 Cisco Web Security Appliance Security Bypass Vulnerability | | sectrack | 1034763 |
|
| Last major update |
07-12-2016 - 23:38 |
| Published |
20-01-2016 - 05:59 |
| Last modified |
07-12-2016 - 23:38 |
