CVE-2009-1202: XSS

Published Jun 25, 2009

Updated

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.

Affected Software

4 affected components

Cisco Adaptive Security Appliance=8.0\(4\)

Cisco Adaptive Security Appliance=8.1.2

Cisco Adaptive Security Appliance=8.2.1

Cisco Adaptive Security Appliance

Event History

Jun 25, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

05:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1202?

CVE-2009-1202 has a medium severity level, posing a risk of cross-site scripting (XSS) attacks.

How do I fix CVE-2009-1202?

To fix CVE-2009-1202, upgrade your Cisco Adaptive Security Appliance Software to a version later than 8.2.1.

What systems are affected by CVE-2009-1202?

CVE-2009-1202 affects Cisco Adaptive Security Appliance devices running software versions 8.0(4), 8.1.2, and 8.2.1.

Can CVE-2009-1202 be exploited remotely?

Yes, CVE-2009-1202 can be exploited remotely, allowing attackers to bypass security mechanisms.

What are the consequences of CVE-2009-1202?

The consequences of CVE-2009-1202 include potential unauthorized access and cross-site scripting attacks on vulnerable systems.