CVE-2014-8023

Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups…

published February 17, 2015

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID CSCtz48533.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01782 · 78.0th percentile
Published
2015-02-17T01:00Z
EPSS history
Timeline
  • 17 FEB 01:00Z
    Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups…
    cvelistv5