The proxy engine on Cisco Web Security Appliance (WSA) devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160119-wsa | Vendor Advisory |
http://www.securitytracker.com/id/1034763 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2016-01-19 21:59
Updated : 2016-12-07 15:38
NVD link : CVE-2016-1296
Mitre link : CVE-2016-1296
JSON object : View
CWE
CWE-254
7PK - Security Features
Products Affected
cisco
- web_security_appliance