CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-05-06
Cisco ASA and FTD Web Services Interface Memory Information Disclosure Vulnerability (CVE-2020-3259) Analysis & Mitigation Guide
[Affected Scope] Cisco ASA Software and Cisco FTD Software with AnyConnect VPN or WebVPN configurations enabled
[Impact] An unauthenticated, remote attacker can retrieve sensitive memory contents (such as user credentials and session tokens) by sending crafted HTTP GET requests
[Mitigation] Apply the official firmware patches provided by Cisco immediately, or restrict access to the web services interface if patching is delayed