Unscored CVE-2014-0738 EUVD-2014-0769GHSA-g62r-wr69-gr9p

The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authent…

Published Feb 22, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66770.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=32956
20140220 Cisco Adaptive Security Appliance Phone Proxy CTL Authentication Vulnerability vendor-advisory