CWE Code: 1188
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Insecure Default Initialization of Resource
Summary: a vulnerability in asyncos for the cisco web security appliance (wsa) could allow an unauthenticated, local attacker to log in to the device with the privileges of a limited user or an unauthenticated, remote attacker to authenticate to certain areas of the web gui, aka a static credentials vulnerability. affected products: virtual and hardware versions of cisco web security appliance (wsa). more information: cscve06124. known affected releases: 10.1.0-204. known fixed releases: 10.5.1-270.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-07-25
Last Modified Date: 2019-10-03