CVE-2010-1575

The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete…

published July 6, 2010

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might allow remote attackers to bypass authentication via crafted header data, as demonstrated by a ClientCert-Subject-CN header, aka Bug ID CSCsz04690.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01686 · 76.8th percentile
Published
2010-07-06T14:00Z
EPSS history
Timeline
  • 06 JUL 14:00Z
    The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete…
    cvelistv5