Description
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.
References
- 1029575 vdb-entry
- 56366 third-party-advisory
- 20140107 Cisco Adaptive Security Appliance RADIUS Change of Authorization Message Replay Vulnerability vendor-advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32362
- 64700 vdb-entry
- 101838 vdb-entry
- cisco-asa-cve20140655-sec-bypass(90164) vdb-entry