CVE-2017-6751: Input Validation
A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to forward traffic from the web proxy interface of an affected device to the administrative management interface of an affected device, aka an Access Control Bypass Vulnerability. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88863. Known Affected Releases: 10.1.0-204 9.0.0-485.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6751?
CVE-2017-6751 is classified as a high severity vulnerability due to its potential impact on the security of the Cisco Web Security Appliance.
How do I fix CVE-2017-6751?
The recommended fix for CVE-2017-6751 is to upgrade the Cisco Web Security Appliance software to the latest version as specified by Cisco.
Who is affected by CVE-2017-6751?
CVE-2017-6751 affects multiple versions of the Cisco Web Security Appliance and Cisco Web Security Virtual Appliance.
Can CVE-2017-6751 be exploited remotely?
Yes, CVE-2017-6751 can be exploited by an unauthenticated remote attacker.
What is the impact of CVE-2017-6751 on affected devices?
CVE-2017-6751 allows attackers to forward traffic from the web proxy interface to the administrative management interface.