CVE-2018-0229
First published: Thu Apr 19 2018(Updated: )
A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. The authentication would need to be done by an unsuspecting third party, aka Session Fixation. The vulnerability exists because there is no mechanism for the ASA or FTD Software to detect that the authentication request originates from the AnyConnect client directly. An attacker could exploit this vulnerability by persuading a user to click a crafted link and authenticating using the company's Identity Provider (IdP). A successful exploit could allow the attacker to hijack a valid authentication token and use that to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. This vulnerability affects the Cisco AnyConnect Secure Mobility Client, and ASA Software and FTD Software configured for SAML 2.0-based SSO for AnyConnect Remote Access VPN that is running on the following Cisco products: 3000 Series Industrial Security Appliances (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvg65072, CSCvh87448.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Anyconnect Secure Mobility Client | =4.6\(200\) | |
| Cisco Adaptive Security Appliance Software | =9.8\(1.245\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0229?
CVE-2018-0229 is a vulnerability in the implementation of SAML Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software.
What is the severity of CVE-2018-0229?
The severity of CVE-2018-0229 is medium with a CVSS score of 6.5.
Which software products are affected by CVE-2018-0229?
The Cisco AnyConnect Secure Mobility Client version 4.6(200), Cisco Adaptive Security Appliance (ASA) Software version 9.8(1.245), and Cisco Firepower Threat Defense (FTD) Software are affected by CVE-2018-0229.
How does CVE-2018-0229 impact the affected software?
CVE-2018-0229 could allow an attacker to bypass SSO authentication and gain unauthorized access to protected resources.
How can I mitigate CVE-2018-0229?
Updating to the latest version of Cisco AnyConnect Secure Mobility Client, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software can help mitigate CVE-2018-0229.
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco anyconnect secure mobility client
- version/cisco anyconnect secure mobility client/4.6\(200\)
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/9.8\(1.245\)