CVE-2010-4680 | BDVDB-2026-44571 Detail

Description#

The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1024963
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
http://www.securityfocus.com/bid/45767
https://exchange.xforce.ibmcloud.com/vulnerabilities/64606
http://secunia.com/advisories/42931

Exploit#

No public exploit known

History#

Version 12011-01-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.