CVE-2018-15398: Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability
First published: Fri Oct 05 2018(Updated: )
A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control list (ACL) that is configured for an interface of an affected device. The vulnerability is due to errors that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit this vulnerability by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to access resources that are behind the affected device and would typically be protected by the interface ACL.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | =9.6\(4.3\) | |
| Cisco Adaptive Security Appliance Software | =9.4\(2\) | |
| Cisco Adaptive Security Appliance Software | =9.4\(4\) | |
| Cisco Firepower Threat Defense | =6.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/author
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/title
- agent/references
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/cisco
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/9.6\(4.3\)
- version/cisco adaptive security appliance software/9.4\(2\)
- version/cisco adaptive security appliance software/9.4\(4\)
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.2.0