CVE-2014-3399

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during…

published October 7, 2014

CVSS
—
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and consequently cause a denial of service (portal outage or system reload), via crafted HTTP requests, aka Bug ID CSCup54208.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.2th percentile
Published
2014-10-07T10:00Z
EPSS history
Timeline
  • 07 OCT 10:00Z
    The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during…
    cvelistv5