Cisco Secure Web Appliance Authentication Bypass Vulnerability
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-20152US | — | — | ||
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authenticat… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (55)
- Behoben11.8.0-414
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.0-429
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.0-453
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.1-023
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.3-018
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.3-021
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben11.8.4-004
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.1-268
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.1-334
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.3-005
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.3-007
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.4-002
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.0.5-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.1-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.1-043
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.2-007
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.2-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.3-002
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.4-005
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.4-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.5-004
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.5-005
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben12.5.6-008
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.1-014
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.1-040
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.1-053
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.1-503
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.2-012
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.3-014
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.4-005
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.5-007
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.1.0-032
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.1.0-041
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.1.0-047
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.0-498
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.0-537
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.0-673
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.1-008
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.1-016
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.1-510
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.1-607
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.2-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.5.3-033
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.0-322
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.0-355
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1-004
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.1.0-287
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.0-116
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.0-164
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.1-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.2-009
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.3-007
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.4-022
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.5-011
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.2.5-013
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan