Description
The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.
References
- 1034001 vdb-entry
- 20151027 Cisco ASA CX Context-Aware Security Web GUI Unauthorized Access Vulnerability vendor-advisory