Description
The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520.
References
- 20140616 Cisco ASA WebVPN Information Disclosure Vulnerability vendor-advisory
- 1030445 vdb-entry
- 68063 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34627