CVE-2009-4455: Medium severity cisco adaptive security appliance 5500 vulnerability
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web sites via a crafted URL obfuscated with ROT13 and a certain encoding. NOTE: this issue was originally reported as a vulnerability related to lack of restrictions to URLs listed in the Cisco WebVPN bookmark component, but the vendor states that "The bookmark feature is not a security feature."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4455?
CVE-2009-4455 is considered a high severity vulnerability due to its potential to allow authenticated users to access unauthorized backend servers.
How do I fix CVE-2009-4455?
To fix CVE-2009-4455, update your Cisco ASA 5500 Series Adaptive Security Appliance to a version that addresses the vulnerability.
What devices are affected by CVE-2009-4455?
CVE-2009-4455 affects Cisco ASA 5500 Series devices running versions 7.0 to 8.2.
What type of access does CVE-2009-4455 allow?
CVE-2009-4455 allows remote authenticated users to bypass intended access restrictions and potentially access unauthorized websites.
Is there a workaround for CVE-2009-4455?
A recommended workaround for CVE-2009-4455 is to review and modify the default configuration settings of the Cisco ASA to restrict backend server access.