CVE-2009-4912

{"id": "CVE-2009-4912", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-06-29T18:30:01.507", "references": [{"url": "http://www.cisco.com/en/US/docs/security/asa/asa81/release/notes/asarn812.html", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID CSCso10876."}, {"lang": "es", "value": "Dispositivos Cisco Adaptive Security Appliances (ASA) de la serie 5580 con versi\u00f3n de software anterior a v8.1(2) completan un \"handshake\" (establacimiento de conexi\u00f3n) SSL con un cliente HTTPS incluso si dicho cliente no est\u00e1 autorizado, lo que podr\u00eda permitir a atacantes remotos evitar resctricciones de acceso establacidas a trav\u00e9s de una sesi\u00f3n HTTPS, tambi\u00e9n conocido como Bug ID CSCso10876."}], "lastModified": "2010-06-30T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:asa_5580:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73E464BF-EEFB-4D23-9F86-B41B4850223E", "versionEndIncluding": "8.1\\(1\\)"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}