deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17067
Published: 2019-10-01
Description: PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-770
References: https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
CVE: CVE-2019-17068
Published: 2019-10-01
Description: PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html
CVE: CVE-2019-17069
Published: 2019-10-01
Description: PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html
CVE: CVE-2019-7618
Published: 2019-10-01
Description: A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-538, CWE-22
References: https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831; https://staging-website.elastic.co/community/security; https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831
CVE: CVE-2019-0231
Published: 2019-10-01
Description: Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019; http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019
CVE: CVE-2019-15035
Published: 2019-10-01
Description: An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1.
CVSS Score: 4.9 (MEDIUM)
References: https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/; https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE: CVE-2019-15041
Published: 2019-10-01
Description: JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/; https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE: CVE-2019-17073
Published: 2019-10-01
Description: emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/emlog/emlog/issues/49; https://github.com/emlog/emlog/issues/49
CVE: CVE-2019-17074
Published: 2019-10-01
Description: An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dayrui/xunruicms/issues/2; https://github.com/dayrui/xunruicms/issues/2
CVE: CVE-2019-8288
Published: 2019-10-01
Description: Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/10/02/1; http://www.vapidlabs.com/advisory.php?v=210; https://www.abcprintf.com/view_download.php?id=17
CVE: CVE-2019-8289
Published: 2019-10-01
Description: Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/10/02/1; http://www.vapidlabs.com/advisory.php?v=210; https://www.abcprintf.com/view_download.php?id=17
CVE: CVE-2019-8290
Published: 2019-10-01
Description: Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/10/02/1; http://www.vapidlabs.com/advisory.php?v=210; https://www.abcprintf.com/view_download.php?id=17
CVE: CVE-2019-8291
Published: 2019-10-01
Description: Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2019/10/02/1; http://www.vapidlabs.com/advisory.php?v=210; https://www.abcprintf.com/view_download.php?id=17
CVE: CVE-2019-8292
Published: 2019-10-01
Description: Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: http://www.openwall.com/lists/oss-security/2019/10/02/1; http://www.openwall.com/lists/oss-security/2019/12/23/1; http://www.openwall.com/lists/oss-security/2019/12/23/2
CVE: CVE-2019-17075
Published: 2019-10-01
Description: An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html; https://lore.kernel.org/lkml/[PII_REDACTED]5611.GA3542072%40kroah.com
CVE: CVE-2019-13335
Published: 2019-10-02
Description: SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_7; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8
CVE: CVE-2019-14454
Published: 2019-10-02
Description: SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8; https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20
CVE: CVE-2019-17080
Published: 2019-10-02
Description: mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/154722/mintinstall-7.9.9-Code-Execution.html; https://forums.linuxmint.com/viewtopic.php?f=143&t=302960; https://github.com/Andhrimnirr/Mintinstall-object-injection
CVE: CVE-2019-17091
Published: 2019-10-02
Description: faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=548244; https://github.com/eclipse-ee4j/mojarra/commit/8f70f2bd024f00ecd5b3dcca45df73edda29dcee; https://github.com/eclipse-ee4j/mojarra/commit/a3fa9573789ed5e867c43ea38374f4dbd5a8f81f
CVE: CVE-2019-13025
Published: 2019-10-02
Description: Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTTP) request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable modem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-669
References: https://xitan.me/posts/connect-box-ch7465lg-rce/; https://xitan.me/posts/connect-box-ch7465lg-rce/
CVE: CVE-2019-4520
Published: 2019-10-02
Description: IBM Security Directory Server 6.4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 165178.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165178; https://www.ibm.com/support/pages/node/1077045; https://exchange.xforce.ibmcloud.com/vulnerabilities/165178
CVE: CVE-2019-4538
Published: 2019-10-02
Description: IBM Security Directory Server 6.4.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 165660.
CVSS Score: 8.2 (HIGH)
CWE: CWE-601
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165660; https://www.ibm.com/support/pages/node/1077045; https://exchange.xforce.ibmcloud.com/vulnerabilities/165660
CVE: CVE-2019-4539
Published: 2019-10-02
Description: IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.
CVSS Score: 7.1 (HIGH)
CWE: CWE-91
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165812; https://www.ibm.com/support/pages/node/1077045; https://exchange.xforce.ibmcloud.com/vulnerabilities/165812
CVE: CVE-2019-4542
Published: 2019-10-02
Description: IBM Security Directory Server 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 165815.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165815; https://www.ibm.com/support/pages/node/1077045; https://exchange.xforce.ibmcloud.com/vulnerabilities/165815
CVE: CVE-2019-4549
Published: 2019-10-02
Description: IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165951; https://www.ibm.com/support/pages/node/1077045; https://exchange.xforce.ibmcloud.com/vulnerabilities/165951
CVE: CVE-2019-13343
Published: 2019-10-02
Description: Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers running Butor Portal. WhiteLabelingServlet is responsible for this vulnerability. It does not properly sanitize user input on the theme t parameter before reusing it in a path. This path is then used without validation to fetch a file and return its raw content to the user via the /wl?t=../../...&h= substring followed by a filename.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://bitbucket.org/account/user/butor-team/projects/PROJ; https://bitbucket.org/butor-team/portal/commits/all; https://bitbucket.org/butor-team/portal/commits/cd7055d33e194fcf530100ee1d8d13aa9cde230b
CVE: CVE-2019-16116
Published: 2019-10-02
Description: EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-327, CWE-532
References: https://enterprisedt.com/products/completeftp/doc/guide/html/history.html; https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/; https://enterprisedt.com/products/completeftp/doc/guide/html/history.html
CVE: CVE-2019-5031
Published: 2019-10-02
Description: An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trigger an out-of-memory condition which isn't handled properly, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-703, CWE-770
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0793; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0793
CVE: CVE-2019-13658
Published: 2019-10-02
Description: CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/154739/CA-Network-Flow-Analysis-9.x-10.0.x-Remote-Command-Execution.html; http://seclists.org/fulldisclosure/2019/Oct/6; https://seclists.org/bugtraq/2019/Oct/4
CVE: CVE-2019-8462
Published: 2019-10-02
Description: In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161812; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152
CVE: CVE-2019-10212
Published: 2019-10-02
Description: A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532, CWE-532
References: https://access.redhat.com/errata/RHSA-2019:2998; https://access.redhat.com/errata/RHSA-2020:0727; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212
CVE: CVE-2019-11929
Published: 2019-10-02
Description: Insufficient boundary checks when formatting numbers in number_format allows read/write access to out-of-bounds memory, potentially leading to remote code execution. This issue affects HHVM versions prior to 3.30.10, all versions between 4.0.0 and 4.8.5, all versions between 4.9.0 and 4.18.2, and versions 4.19.0, 4.19.1, 4.20.0, 4.20.1, 4.20.2, 4.21.0, 4.22.0, 4.23.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://github.com/facebook/hhvm/commit/dbeb9a56a638e3fdcef8b691c2a2967132dae692; https://hhvm.com/blog/2019/09/25/security-update.html; https://www.facebook.com/security/advisories/cve-2019-11929
CVE: CVE-2019-12156
Published: 2019-10-02
Description: Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/; https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE: CVE-2019-12157
Published: 2019-10-02
Description: In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/; https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE: CVE-2019-12630
Published: 2019-10-02
Description: A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary commands on the device with the privileges of casuser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-502
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-sm-java-deserial; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-sm-java-deserial
CVE: CVE-2019-12631
Published: 2019-10-02
Description: A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ise-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ise-xss
CVE: CVE-2019-12673
Published: 2019-10-02
Description: A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of FTP data. An attacker could exploit this vulnerability by sending malicious FTP traffic through an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos
CVE: CVE-2019-12674
Published: 2019-10-02
Description: Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these vulnerabilities by modifying critical files on the underlying filesystem. A successful exploit could allow the attacker to execute commands with root privileges within the host namespace. This could allow the attacker to impact other running FTD instances.
CVSS Score: 8.2 (HIGH)
CWE: CWE-216, CWE-116
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc
CVE: CVE-2019-12675
Published: 2019-10-02
Description: Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these vulnerabilities by modifying critical files on the underlying filesystem. A successful exploit could allow the attacker to execute commands with root privileges within the host namespace. This could allow the attacker to impact other running FTD instances.
CVSS Score: 8.8 (HIGH)
CWE: CWE-216, CWE-116
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc
CVE: CVE-2019-12676
Published: 2019-10-02
Description: A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software improperly parses certain options in OSPF link-state advertisement (LSA) type 11 packets. An attacker could exploit this vulnerability by sending a crafted LSA type 11 OSPF packet to an affected device. A successful exploit could allow the attacker to cause a reload of the affected device, resulting in a DoS condition for client traffic that is traversing the device.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ospf-lsa-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ospf-lsa-dos
CVE: CVE-2019-12677
Published: 2019-10-02
Description: A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition that prevents the creation of new SSL/Transport Layer Security (TLS) connections to an affected device. The vulnerability is due to incorrect handling of Base64-encoded strings. An attacker could exploit this vulnerability by opening many SSL VPN sessions to an affected device. The attacker would need to have valid user credentials on the affected device to exploit this vulnerability. A successful exploit could allow the attacker to overwrite a special system memory location, which will eventually result in memory allocation errors for new SSL/TLS sessions to the device, preventing successful establishment of these sessions. A reload of the device is required to recover from this condition. Established SSL/TLS connections to the device and SSL/TLS connections through the device are not affected. Note: Although this vulnerability is in the SSL VPN feature, successful exploitation of this vulnerability would affect all new SSL/TLS sessions to the device, including management sessions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-172, CWE-755
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ssl-vpn-dos; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ssl-vpn-dos